3669 matches found
US and UK Military Social Network “Forces Penpals” Exposes SSN, PII Data
Forces Penpals, a social network for US and UK military personnel, exposed the sensitive data of 1.1M users,…...
GO-2024-3265 Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis
Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis...
CVE-2021-1425
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is bei...
Exploit for CVE-2024-54820
Vulnerability: Unauthenticated SQL Injection - Clear Credentia...
UBUNTU-CVE-2024-52867
guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns e.g., for setuid and setgid programs are properly addressed. The vulnerability can be remediated within the product via certain pull, reconfigure, a...
IBM: Exposed Logs and Bearer Tokens on Test Endpoint
Exposed Logs and Bearer Tokens on Test Endpoint were reported to IBM, analyzed, and have been remediated...
PT-2024-11003
Name of the Vulnerable Software and Affected Versions janeczku/calibre-web versions prior to the fix Description A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, whe...
MAL-2024-10698 Malicious code in commitlint-config-jira-type-infra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3a60114c639e9e20430efd4c98505d38340a52eece4ea1eb6eca3117556cc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Lunary 信息泄露漏洞
lunary is lunary open source a production toolkit for LLM . lunary suffers from an information disclosure vulnerability that stems from the fact that tokens can be exposed to unauthorized actors, allowing them to perform operations on behalf of the user. An attacker could exploit this vulnerabili...
Threats in space (or rather, on Earth): internet-exposed GNSS receivers
What is GNSS? Global Navigation Satellite Systems GNSS are collections, or constellations of satellite positioning systems. There are several GNSSs launched by different countries currently in operation: GPS US, GLONASS Russia, Galileo EU, BeiDou Navigation Satellite System BDS, China, Navigation...
Mozilla Thunderbird < 132.0.1
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 132.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-62 advisory. - Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. CVE-2024-11159 Note...
Dell SmartFabric OS10 安全漏洞
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. An unauthorized access vulnerability exists in Dell SmartFabric OS10, which arises from a file or directory issue that contains a file or directory that is accessible to an outside party. A low-privileged...
PT-2024-10775 · Luvion · Luvion Grand Elite 3 Connect
Name of the Vulnerable Software and Affected Versions: Luvion Grand Elite 3 Connect through 2020-02-25 Description: An issue was discovered that allows clients to authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web...
Logpoint 安全漏洞
Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0 that stems from an exposed endpoint used by a distributed Logpoint setup, allowing an unauthenticated attacker to bypass CSRF protection and...
PT-2024-8211 · Cisco · Cisco Unified Communications Manager Im & Presence Service
Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P affected versions not specified Description: A vulnerability in the logging component could allow an authenticated, remote attacker to view sensitive information in...
CVE-2023-29121 Exposed TCF agent service in Enel X Juicebox
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system...
PT-2024-33146 · Unknown · Cloud Smart Lock
Name of the Vulnerable Software and Affected Versions: Cloud Smart Lock version 2.0.1 Description: The issue concerns a leaked URL in the APK file that can be used to call an API for binding physical devices. This allows attackers to construct requests to bind the app to unknown devices by findin...
CVE-2024-48016
Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to...
SUSE CVE-2024-47779
Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can, under specially crafted conditions, lead to the access token becoming exposed to third parties. At least one vector has been identified internally,...