11939 matches found
PT-2024-1438 · Delta Industrial Automation · Dopsoft
Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack-based buffer overflow exists in Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. This issue can be...
hp9100.info Improper Access Control vulnerability OBB-3837059
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
gymbruneck.info Improper Access Control vulnerability OBB-3837004
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
RHSA-2024:0224
creationtimestamp| type| source ---|---|--- 2024-01-17 17:16:41+00:00| seen| https://t.me/ctinow/169350...
Code injection
IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709...
Foxit PDF Editor for Mac < 11.1.6 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.6. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerabili...
PT-2024-11599 · Vagary Digital · Hreflang Tags Lite
Name of the Vulnerable Software and Affected Versions: HREFLANG Tags Lite versions n/a through 2.0.0 Description: The issue is related to a Missing Authorization vulnerability in Vagary Digital HREFLANG Tags Lite. Recommendations: For versions n/a through 2.0.0, at the moment, there is no...
EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2023-2724)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a...
A week in security (January 8 – January 14)
Last week on Malwarebytes Labs: FCC wants cars to make life harder for stalkers Joomla! vulnerability is being actively exploited Act now! Ivanti vulnerabilities are being actively exploited Ransomware review: January 2024 Info-stealers can steal cookies for permanent access to your Google accoun...
CVE-2024-0485
A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...
CVE-2024-0469
A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...
CVE-2023-31031
CVE-2023-31031 affects NVIDIA DGX Station A100 and DGX Station A800 SBIOS. Public documents describe a heap-based buffer overflow via local access, enabling possible code execution, denial of service, information disclosure, and data tampering . Exploitation details are not consistently provided ...
MediaWiki Cross-Site Scripting Vulnerability
MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki versions prior to 1.35.14, 1.36.x through 1.39.6,...
Human Resource Integrated System SQL Injection Vulnerability
Human Resource Integrated System is a human resource integration system. A SQL injection vulnerability exists in code-projects Human Resource Integrated System version 1.0, which stems from a SQL injection vulnerability in the updatepersonalinfo.php file...
Online Faculty Clearance SQL Injection Vulnerability
Online Faculty Clearance is a software application. A SQL injection vulnerability exists in Online Faculty Clearance version 1.0, which originates from a SQL injection vulnerability in the /product/adminviewinfo.php file...
CVE-2024-21982
CVE-2024-21982 affects NetApp ONTAP 9.4 and later. The issue is described as a vulnerability where disclosure of sensitive information could occur when the object-store profiler command is executed by an administrative user. Connected sources specify the Object-Store Profiler Command Handler as t...
Info-stealers can steal cookies for permanent access to your Google account
Hackers have found a way to gain unauthorized access to Google accounts, bypassing any multi-factor authentication MFA the user may have set up. To do this they steal authentication cookies and then extend their lifespan. It doesn’t even help if the owner of the account changes their password...
DeShang DSShop Security Vulnerability
DeShang DSShop is a single-store mobile mall online store system from DeShang. A security vulnerability exists in DeShang DSShop before version 2.1.5, which originates from a path traversal caused by the operation of the parameter memberinfo in the file application/home/controller/MemberAuth.php...