CVE-2024-21891

creationtimestamp| type| source ---|---|--- 2024-02-20 03:31:49+00:00| seen| https://t.me/ctinow/188072 2024-02-20 03:32:03+00:00| seen| https://t.me/ctinow/188081 2024-02-21 07:14:13+00:00| seen| https://t.me/arpsyndicate/3717 2024-03-15 11:26:46+00:00| seen| https://t.me/ctinow/208638 2024-11-1...

Google Open Sources Magika: AI-Powered File Identification Tool

Google has announced that it's open-sourcing Magika, an artificial intelligence AI-powered tool to identify file types, to help defenders accurately detect binary and textual file types. "Magika outperforms conventional file identification methods providing an overall 30% accuracy boost and up to...

BELL-CVE-2024-22017

Bulletin has no description...

Exploit for PHP External Variable Modification in Juniper Junos

Automation for Juniper CVE:2023-36845 by Asbawy - Modified b...

CVE-2021-46757

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation...

CVE-2024-21345 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-22224

creationtimestamp| type| source ---|---|--- 2024-02-12 20:26:57+00:00| seen| https://t.me/ctinow/183380 2025-03-10 19:02:44+00:00| seen| https://bsky.app/profile/aakl.bsky.social/post/3lk2aizetpk2g 2025-03-26 21:48:10+00:00| seen| https://bsky.app/profile/doingfedtime.bsky.social/post/3llcr7ijzok...

CVE-2024-25740

A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBIIOCATT, because kobj-name is not released...

CVE-2024-23759

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...

CVE-2024-25309

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacherlogin.php...

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

PT-2024-13093 · Qualcomm · Snapdragon +62

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when an Access Point AP includes a TID Traffic ID to link mapping Information Element IE in its beacons...

CVE-2024-23108

creationtimestamp| type| source ---|---|--- 2024-02-05 15:26:28+00:00| seen| https://t.me/ctinow/179262 2024-02-07 14:20:05+00:00| seen| https://t.me/truesecator/5386 2024-02-08 12:16:36+00:00| seen| https://t.me/itsecnews/4092 2024-02-08 16:26:19+00:00| seen| https://t.me/kasperskyb2b/1130...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

Lenovo Model Name Identification

Binary data lenovomodeldetect.nbin...

Identify and De-risk Unmanaged, Unauthorized Devices With Qualys CyberSecurity Asset Management (CSAM)

69% of organizations said they experienced at least one cyberattack resulting from an exploit of an unknown or unmanaged asset such as software, cloud-based workloads user accounts, and IoT devices. Ultimately, these attacks stem from visibility gaps in the attack surface. Bringing these assets...

CVE-2024-1086 Use-after-free in Linux kernel's netfilter: nf_tables component

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The nftverdictinit function allows positive values as drop error within the hook verdict, and hence the nfhookslow function can cause a double free...

CVE-2024-23840 `goreleaser release --debug` shows secrets

GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. goreleaser release --debug log shows secret values used in the in the custom publisher. This vulnerability is fixed in 1.24.0...

CVE-2023-36259

Cross Site Scripting XSS vulnerability in Craft CMS Audit Plugin before version 3.0.2 allows attackers to execute arbitrary code during user creation...

CVE-2024-23334 aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...