GHSA-88H5-6W7M-5W56

creationtimestamp| type| source ---|---|--- 2024-11-07 00:32:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113438853912158188...

PT-2024-10740 · One2Track · One2Track

Name of the Vulnerable Software and Affected Versions: One2Track version 2019-12-08 Description: An issue was discovered where any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device produces a "Remove PIN and restart!" message and cannot be used, making...

CVE-2024-50345

creationtimestamp| type| source ---|---|--- 2024-11-06 21:01:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113438023541075562 2024-11-06 23:21:32+00:00| seen| https://t.me/cvedetector/10042 2025-01-02 14:57:13+00:00| seen|...

CVE-2024-20539

creationtimestamp| type| source ---|---|--- 2024-11-06 19:10:42+00:00| seen| https://t.me/cvedetector/10020 2024-11-07 14:20:08+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113442108664352339 2024-11-07 14:20:08+00:00| seen|...

CVE-2024-8614

creationtimestamp| type| source ---|---|--- 2024-11-06 08:33:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113435082831757339 2024-11-06 10:49:02+00:00| seen| https://t.me/cvedetector/9999 2026-06-20 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mop6w2qzeg23...

South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

Meta has been fined 21.62 billion won $15.67 million by South Korea's data privacy watchdog for illegally collecting sensitive personal information from Facebook users, including data about their political views and sexual orientation, and sharing it with advertisers without their consent. The...

CVE-2024-7879

creationtimestamp| type| source ---|---|--- 2024-11-06 06:11:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113434526373654462 2024-11-06 08:18:29+00:00| seen| https://t.me/cvedetector/9989...

CVE-2024-34677

creationtimestamp| type| source ---|---|--- 2024-11-06 02:47:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113433724159209434 2024-11-06 04:57:51+00:00| seen| https://t.me/cvedetector/9987...

CVE-2024-34673

creationtimestamp| type| source ---|---|--- 2024-11-06 02:32:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113433665117012341 2024-11-06 04:57:46+00:00| seen| https://t.me/cvedetector/9983...

CVE-2024-50135

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix race condition between reset and nvmedevdisable nvmedevdisable modifies the dev-onlinequeues field, therefore nvmepciupdatenrqueues should avoid racing against it, otherwise we could end up passing invalid values to...

CVE-2024-50099

In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and simulateldrswliteral functions are unsafe to use for uprobes. Both functions were originally written for use with kprobes, and access memory with...

CVE-2024-51530

creationtimestamp| type| source ---|---|--- 2024-11-05 11:21:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113430082126649433 2024-11-05 13:51:54+00:00| seen| https://t.me/cvedetector/9861...

What goes into testing a ship?

TL;DR Testing a ship involves identifying and mitigating cybersecurity risks using the "Identify, Prevent, Detect, Respond, Recover" framework. Guidelines include MSC.42898, BIMCO, IACS UR E26/E27, and ISO standards. New builds and existing vessels require proper documentation and network securit...

CVE-2024-32870

creationtimestamp| type| source ---|---|--- 2024-11-05 02:09:21+00:00| seen| https://t.me/cvedetector/9804 2025-04-23 17:49:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-32870.yaml 2025-04-25 21:02:12+00:00| seen|...

Brokerage Wave 加密问题漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. An encryption issue vulnerability exists in Brokerage Wave version 2.0, which stems from weak encryption of sensitive data received at the API response, which could allow an attacker to manipulate the parameter userid via the API request U...

WordPress Loginizer Security Plugin <= 1.9.2 is vulnerable to Broken Authentication

Software Loginizer Security Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10097 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 39d130db7003 Credits...

CVE-2024-51482

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

CVE-2024-46956

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution...

CVE-2024-46951

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution...

CVE-2024-46953

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string for the output filename results in path truncation, and possible path traversal and code execution...