CVE-2024-35152

creationtimestamp| type| source ---|---|--- 2024-08-14 20:44:29+00:00| seen| https://t.me/cvedetector/3193...

SECOM Dr.ID Access Control System 安全漏洞

SECOM Dr.ID Access Control System is an access control system from China Zhongbao SECOM. A security vulnerability exists in SECOM Dr.ID Access Control System versions prior to 3.6.3, which stems from the presence of specific page parameters that are not properly validated, allowing an...

CVE-2024-38214

Windows Routing and Remote Access Service RRAS Information Disclosure Vulnerability...

CVE-2024-6892

creationtimestamp| type| source ---|---|--- 2024-08-08 03:01:08+00:00| seen| https://t.me/cvedetector/2739 2025-03-11 11:09:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6892.yaml 2025-03-13 21:02:11+00:00| seen|...

CVE-2024-7531

Calling PK11Encrypt in NSS using CKMCHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcom...

CVE-2024-6886

creationtimestamp| type| source ---|---|--- 2024-08-06 07:28:39+00:00| seen| https://t.me/cvedetector/2525 2025-01-31 21:01:55+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lh2vh5wuv627...

CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

Enhancing Incident Response Readiness with Wazuh

Incident response is a structured approach to managing and addressing security breaches or cyber-attacks. Security teams must overcome challenges such as timely detection, comprehensive data collection, and coordinated actions to enhance readiness. Improving these areas ensures a swift and...

CVE-2024-40096

The com.cascadialabs.who aka Who - Caller ID, Spam Block application 15.0 for Android places sensitive information in the system log...

BELL-CVE-2024-42152

Bulletin has no description...

BELL-CVE-2024-41085

Bulletin has no description...

BELL-CVE-2024-41057

Bulletin has no description...

PT-2024-09: Creating arbitrary files during project creation in PT Application Inspector (PT AI)

The vulnerability was identified in PT AI affecting versions 4.3.1 to 4.7.2. The vulnerability can be exploited by an attacker with network access to the PT AI control server to create arbitrary files without the ability to overwrite existing files. Exploitation of the vulnerability requires...

One2Track 安全漏洞

One2Track is a GPS phone watch for children from One2Track. One2Track has a security vulnerability that stems from a missing PIN configuration...

CVE-2024-41096

In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msicapabilityinit KFENCE reports the following UAF: BUG: KFENCE: use-after-free read in pcienablemsirange+0x2c0/0x488 Use-after-free read at 0x0000000024629571 in kfence-12: pcienablemsirange+0x2c0/0x488...

CVE-2024-41063

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: cancel all works upon hciunregisterdev syzbot is reporting that calling hcireleasedev from hcierrorreset due to hcidevput from hcierrorreset can cause deadlock at destroyworkqueue, for hcierrorreset is called...

CVE-2024-41031

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGEPMDORDER is 13 when the base page size is 64KB. The PMD-sized page cache can't be supported by xarray as the following error messages indicate. ------------...

CVE-2024-41080

In the Linux kernel, the following vulnerability has been resolved: iouring: fix possible deadlock in ioregisteriowqmaxworkers The ioregisteriowqmaxworkers function calls ioputsqdata, which acquires the sqd-lock without releasing the uringlock. Similar to the commit 009ad9f0c6ee "iouring: drop...

CVE-2023-45249

creationtimestamp| type| source ---|---|--- 2024-07-24 16:38:51+00:00| seen| https://t.me/cvedetector/1563 2024-07-29 13:56:09+00:00| exploited| https://t.me/truesecator/6030 2024-07-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-07-29 18:19:52+00:00| seen|...

CVE-2024-5602

A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted nitrace file. The NI I/O Trace tool is installed as part of the NI...