The vulnerability of the WireGuard VPN software component of the TP-Link ER7206 Omada VPN router allows a hacker to execute arbitrary commands.

The vulnerability of the WireGuard VPN component of the TP-Link ER7206 Omada VPN router exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through port 80/443 remotely...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

Code injection

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

CVE-2024-23591

The CVE-2024-23591 entry concerns Lenovo ThinkSystem SR670V2 servers (manufactured roughly June 2021–July 2023) left in Manufacturing Mode. Affected scenario: an attacker with privileged logical access to the host or physical access to server internals could modify or disable Intel Boot Guard fir...

CVE-2024-23591

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security...

Lenovo ThinkSystem Security Breach

Lenovo ThinkSystem is a ThinkSystem series server appliance from Lenovo, China. A security vulnerability exists in the Lenovo ThinkSystem SR670V2 that originates from a vulnerability that allows an attacker with logical access to the host or physical access within the server to modify or disable...

Intel SGX DCAP Software Security Vulnerability

Intel SGX DCAP Software is an Intel Corporation USA software that provides access control for enclaves in SGX. A security vulnerability previously existed in Intel SGX DCAP Software version 1.19.100.3, which stemmed from improper input validation in the affected product. It could result in an...

PT-2024-1819 · Lenovo · Lenovo Thinksystem Sr670V2

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 Description: The issue is related to Lenovo ThinkSystem SR670V2 servers being left in Manufacturing Mode, which could allow an attacker with privileged...

CVE-2024-21916

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault MNRF. The device will restart itself to recover from the MNRF...

Rockwell Automation ControlLogix 缓冲区错误漏洞

Rockwell Automation ControlLogix and GuardLogix are both Rockwell Automation controllers. A denial of service vulnerability exists in Rockwell Automation ControlLogix and GuardLogix, which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted reques...

Important: Red Hat Security Advisory: java-17-openjdk security and bug fix update

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs

Since November 2023, Microsoft has observed a distinct subset of Mint Sandstorm PHOSPHORUS targeting high-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the United Kingdom, and the United States. In this campaign,...

CVE-2022-46486

A lack of pointer-validation logic in the sconedispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information...

PT-2023-14943 · Intel · Scone

Name of the Vulnerable Software and Affected Versions: SCONE versions prior to 5.8.0 Description: A lack of pointer-validation logic in the scone dispatch component of SCONE for Intel SGX allows attackers to access sensitive information. Recommendations: For versions prior to 5.8.0, update to...

Malicious code in flow-session-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98ef7d6ade8e634b82bd1d79345489c30800a8b1078467e02c1bd113b1ce0f16 The OpenSSF Package Analysis project identified 'flow-session-guard' @ 99.99.993 npm as malicious. It is considered malicious because: - The...

CVE-2023-29485

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass network filtering, execute arbitrary code, and obtain sensitive information via DarkLayer Guard threat prevention module. NOTE: Heimdal disputes the validit...

CVE-2023-29485

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass network filtering, execute arbitrary code, and obtain sensitive information via DarkLayer Guard threat prevention module. NOTE: Heimdal disputes the validit...

CVE-2023-29485

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass network filtering, execute arbitrary code, and obtain sensitive information via DarkLayer Guard threat prevention module. NOTE: Heimdal disputes the validit...