CVE-2024-27050 libbpf: Use OPTS_SET() macro in bpf_xdp_query()

In the Linux kernel, the following vulnerability has been resolved: libbpf: Use OPTSSET macro in bpfxdpquery When the featureflags and xdpzcmaxsegs fields were added to the libbpf bpfxdpqueryopts, the code writing them did not use the OPTSSET macro. This causes libbpf to write to those fields...

ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

The authors behind the resurfaced ZLoader malware have added a feature that was originally present in the Zeus banking trojan that it's based on, indicating that it's being actively developed. "The latest version, 2.4.1.0, introduces a feature to prevent execution on machines that differ from the...

PT-2024-25473 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R1.01 Description: An issue with the Autodiscover component in Nagios XI allows a remote attacker to escalate privileges via a crafted Dashlet. Recommendations: For Nagios XI version 2024R1.01, consider disabling the...

CVE-2020-27478

Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf11505a7 allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

kernel: KVM: nSVM: Check instead of asserting on nested TSC scaling support

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Check instead of asserting on nested TSC scaling support Check for nested TSC scaling support on nested SVM VMRUN instead of asserting that TSC scaling is exposed to L1 if L1's MSRAMD64TSCRATIO has diverged from KVM's...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

PT-2024-25198 · Unknown · Tvs Connet

Name of the Vulnerable Software and Affected Versions: TVS Connet versions 4.5.1 through 4.5.1 TVS Connet version 5.0.0 Description: An issue in TVS Connet allows a remote attacker to escalate privileges via the Emergency Contact Feature. This issue is disputed as discussed in the...

CVE-2024-33308

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...

CVE-2024-33308

CVE-2024-33308 affects TVS Connet for Android v4.5.1 and iOS v5.0.0, enabling remote privilege escalation via the Emergency Contact Feature. Root cause and exact exploitation details are not provided across the sources, but multiple entries note the dispute around the vulnerability (CVE-Evidence ...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web MotW feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file...

DEBIAN-CVE-2022-48645

In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC taprio, cbs, gate, police are configured through a mix of command BD ring messages and port registers: enetcportrd, enetcportwr. Port...

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

Microsoft Windows MHT File Mark-Of-The-Web Bypass Remote Code Execution Vulnerability

This vulnerability allows remote attackers to bypass the Mark-Of-The-Web security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. T...

PT-2024-22887 · Entrust · E-Trust Horacius

Name of the Vulnerable Software and Affected Versions: e-trust Horacius versions 1.0 through 1.2 Description: The issue allows a local attacker to escalate privileges via the password reset function. It is described as an Insecure Permissions vulnerability, enabling unauthenticated privilege...

Unspecified Vulnerability in Microsoft Edge (CNVD-2024-24957)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. An attacker can exploit the vulnerability to be able to bypass certain features...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, nodetaint, spark-operator, kubernetes-dns-node-cache, rancher-webhook-fips, argocd-image-updater-fips, rancher-webhook, local-static-provisioner, argocd-image-updater, kubeflow-pipelines, kubernetes-csi-driver-hostpath, kubernetes,...

PT-2024-7005

Name of the Vulnerable Software and Affected Versions Grafana versions prior to v11.0.6+security-01 Grafana versions prior to v11.1.7+security-01 Grafana versions prior to v11.2.2+security-01 Description The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queri...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, nodetaint, spark-operator, kubernetes-dns-node-cache, rancher-webhook-fips, argocd-image-updater-fips, rancher-webhook, local-static-provisioner, argocd-image-updater, kubeflow-pipelines, kubernetes-csi-driver-hostpath, kubernetes,...