CVE-2024-45050: Missing Authorization

Ringer server is the server code for the Ringer messaging app. Prior to version 1.3.1, there is an issue with the messages loading route where Ringer Server does not check to ensure that the user loading the conversation is actually a member of that conversation. This allows any user with a Lif...

PT-2024-31402 · Unknown · Ringer Server

Name of the Vulnerable Software and Affected Versions: Ringer server versions prior to 1.3.1 Description: The issue concerns the messages loading route in the Ringer server, where it fails to verify if the user loading a conversation is actually a member of that conversation. This allows any user...

CVE-2024-44821

ZZCMS version 2023 is vulnerable to an improper authentication flaw within the captcha reuse logic located in the /inc/function.php file. The root cause is that the checkyzm function fails to properly refresh the captcha value following a failed validation attempt. This allows an attacker to repe...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

golang: net: malformed DNS message can cause infinite loop

A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...

CVE-2023-52887

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew This patch enhances error handling in scenarios with RTS Request to Send messages arriving closely. It replaces the less informative...

EulerOS Virtualization 2.12.1 : python-cryptography (EulerOS-SA-2024-2315)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured message...

CVE-2024-33045 Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP...

PT-2024-19838

Name of the Vulnerable Software and Affected Versions Qualcomm products affected versions not specified Description The issue is related to information disclosure while decoding Tracking Area Update Accept or Attach Accept messages received from the network. This can lead to information disclosur...

PT-2024-25088 · Unknown · Adsp Btfm Client

Name of the Vulnerable Software and Affected Versions: ADSP BTFM client affected versions not specified Description: The issue is related to memory corruption that occurs when the BTFM client sends new messages over Slimbus to the ADSP. This happens due to the improper handling of a local...

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 - Critical Remote Code Execution Vulnerability...

Cross-site Scripting (XSS)

Typo3 is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper parsing of values assigned to HTML attributes in the frontend's typolink functionality and improper encoding of error messages in the backend's filelist module when renaming files...

CVE-2024-32399

creationtimestamp| type| source ---|---|--- 2024-08-30 06:52:02+00:00| published-proof-of-concept| https://t.me/codeb0ss/1554 2024-08-31 12:29:12+00:00| published-proof-of-concept| Telegram/XpvaFCWqDdhczMpL78DIu7UwbRt1BfqFLpK3OfazzKgSSlAyeg 2024-08-31 12:42:28+00:00| published-proof-of-concept|...

MAL-2024-8088 Malicious code in paypal-messages-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566f2539409828163b03e79534cea7b15424dcda3b8ad2435ab9deba555757e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in paypal-messages-android

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in paypal-messages-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566f2539409828163b03e79534cea7b15424dcda3b8ad2435ab9deba555757e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

When Get-Out-The-Vote Efforts Look Like Phishing

Multiple media reports this week warned Americans to be on guard against a new phishing scam that arrives in a text message informing recipients they are not yet registered to vote. A bit of digging reveals the missives were sent by a California political consulting firm as part of a well-meaning...

CVE-2024-8046

creationtimestamp| type| source ---|---|--- 2024-08-27 10:42:46+00:00| seen| https://t.me/cvedetector/4231 2024-08-27 15:19:56+00:00| seen| https://t.me/HackerArsenal/215...

CVE-2024-43802 heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may lead to the tboff position within the...

CVE-2024-43802

Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may lead to the tboff position within the...