CVE-2024-34675

creationtimestamp| type| source ---|---|--- 2024-11-06 02:32:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113433665147209911 2024-11-06 04:57:50+00:00| seen| https://t.me/cvedetector/9985...

CVE-2024-49405

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario...

PT-2024-7983 · D Link · D-Link Dns-320 +2

Name of the Vulnerable Software and Affected Versions: D-Link DNS-320 versions up to 20241028 D-Link DNS-320LW versions up to 20241028 D-Link DNS-325 versions up to 20241028 D-Link DNS-340L versions up to 20241028 Description: The issue is related to insufficient protection of service data in the...

CVE-2024-50103

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

CVE-2024-50100

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix "task hung" problem The syzbot fuzzer has been encountering "task hung" problems ever since the dummy-hcd driver was changed to use hrtimers instead of regular timers. It turns out that the problems ar...

CVE-2024-50110 xfrm: fix one more kernel-infoleak in algo dumping

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the following issue was discovered: BUG: KMSAN: kernel-infoleak in copytoiter+0x598/0x2a30 copytoiter+0x598/0x2a30 skbdatagramiter+0x168/0x1060...

CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...

CVE-2024-51522

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51522

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-47797

CVE-2024-47797 affects OpenHarmony v4.1.0 and earlier. A local attacker can exploit an out-of-bounds write to elevate privileges (normal user to root) and leak sensitive information. The vulnerability impacts confidentiality and, to a lesser extent, integrity/availability as described in the sour...

kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set()

A race condition was found in the Linux kernel's net/bluetooth device driver within the conninfomin,maxageset function. This issue can lead to an integrity overflow issue, potentially disrupting Bluetooth connections or facilitating a denial of service attack...

PT-2024-33516 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.4.04.7 Description: The issue is related to improper authentication in the Private Info feature of Samsung Pass, allowing physical attackers to access sensitive information in a specific scenario...

PT-2024-40625 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes functions such as yara yyparse, yr lex...

PT-2024-19861 · Unknown · Wifi Display Api

Name of the Vulnerable Software and Affected Versions: WiFi Display API affected versions not specified Description: The issue is related to memory corruption that occurs when WiFi display APIs are invoked with large random inputs. Recommendations: At the moment, there is no information about a...

1,000+ web shops infected by “Phish ‘n Ships” criminals who create fake product listings for in-demand products

Researchers at the Satori Threat Intelligence and Research team have published their findings about a group of cybercriminals that infect legitimate web shops to create and promote fake product listings. The threat, dubbed "Phish ‘n Ships" by the researchers, reportedly infected more than 1,000...

CVE-2024-10657

A vulnerability classified as critical has been found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/approvecenter/prcsinfo.php. The manipulation of the argument RUNID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...

Exploit for CVE-2024-9926

wordpress-jetpack-broken-access-control-exploit This is a Pyt...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system of China Tongda TONGDA. TONGDA Office Anywhere has a SQL injection vulnerability that originates from the RUNID parameter of the /pda/approvecenter/prcsinfo.php page that contains a SQL injection vulnerability...

PT-2024-27434 · Unknown · Masterstudy Elementor Widgets

Name of the Vulnerable Software and Affected Versions: Masterstudy Elementor Widgets versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Masterstu...

CVE-2024-10595

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. Th...