Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks

The Kimsuky aka Springtail advanced persistent threat APT group, which is linked to North Korea's Reconnaissance General Bureau RGB, has been observed deploying a Linux version of its GoBear backdoor as part of a campaign targeting South Korean organizations. The backdoor, codenamed Gomir, is...

CVE-2024-4903

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-4339

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General widget in all versions up to, and including, 3.14.3 due to insufficient input sanitization and output escaping. This make...

General Electric Healthcare Ultrasound 安全漏洞

GE General Electric Healthcare Ultrasound is a medical sonic detection device from General Electric GE. A security vulnerability exists in General Electric Healthcare Ultrasound. An attacker could exploit the vulnerability to elevate privileges...

GE HealthCare ultrasound devices 操作系统命令注入漏洞

GE General Electric Healthcare Ultrasound is a medical sonic detection device from General Electric GE. An operating system command injection vulnerability exists in GE HealthCare ultrasound devices, which stems from the presence of an operating system command injection vulnerability...

General Electric Healthcare Ultrasound 路径遍历漏洞

GE General Electric Healthcare Ultrasound is a medical sonic detection device from General Electric GE. A path traversal vulnerability exists in General Electric Healthcare Ultrasound. An attacker could exploit this vulnerability to access files and directories stored outside of the web root fold...

General Electric Healthcare Imaging 信任管理问题漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A trust management issue vulnerability exists in General Electric Healthcare Imaging that stems from weak account passwords...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging that stems from allowing unprivileged access to critical files...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging. An attacker could exploit the vulnerability to elevate privileges...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging that stems from a flaw in data in transit...

CVE-2024-4339: Improper Neutralization of Input During Web Page Generation

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General widget in all versions up to, and including, 3.14.3 due to insufficient input sanitization and output escaping. This make...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging that stems from inadequate credential protection...

General Electric Healthcare Ultrasound 路径遍历漏洞

GE General Electric Healthcare Ultrasound is a medical sonic detection device from General Electric GE. A path traversal vulnerability exists in General Electric Healthcare Ultrasound. An attacker could exploit this vulnerability to access files and directories stored outside of the web root fold...

Campcodes Legal Case Management System 代码问题漏洞

Campcodes Legal Case Management System is a legal case management system from Campcodes, Inc. A code issue vulnerability exists in Campcodes Legal Case Management System version 1.0, which stems from a vulnerability in the /admin/general-setting file...

PT-2024-26943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to netfilter: tproxy, where the kernel would not bail out if IP has been disabled on the device. This issue was reported by...

PT-2024-32215

Name of the Vulnerable Software and Affected Versions Campcodes Legal Case Management System version 1.0 Description A critical issue was found in the Setting Handler component, specifically in the /admin/general-setting file, where an unknown function is affected. The manipulation of the...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6767-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6767-1 advisory. Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of- bounds read vulnerability. An attacker...

CVE-2024-27062 nouveau: lock the client object tree.

In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking unless I've missed something else. Fix races around adding/removing client objects, mostly vram bar mappings. 4562.099306 general protection...

CVE-2024-27062

In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking unless I've missed something else. Fix races around adding/removing client objects, mostly vram bar mappings. 4562.099306 general protection...

CVE-2024-27062: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking unless I've missed something else. Fix races around adding/removing client objects, mostly vram bar mappings. 4562.099306 general protection...