CVE-2024-35119

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: 290342...

Denial of Service by publishing large messages over the HTTP API

...

CVE-2024-31919

CVE-2024-31919 affects IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD in certain configurations. The vulnerability enables a denial-of-service caused by an error processing messages when an API Exit uses MQBUFMH. IBM X-Force assigns a base score of 5.9 (vector CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S...

CVE-2024-2973

creationtimestamp| type| source ---|---|--- 2024-06-28 16:04:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/4014 2024-07-01 08:28:03+00:00| seen| https://t.me/thehackernews/5191 2024-07-01 08:56:31+00:00| seen| https://t.me/KomunitiSiber/2186 2024-07-01 09:03:31+00:00| seen|...

PT-2024-26342 · Ibm · Ibm Mq Console

Name of the Vulnerable Software and Affected Versions: IBM MQ Console versions 9.3 LTS and 9.3 CD Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...

PT-2024-26343 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS and 9.3 CD Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

Rocket.Chat: NoSQL injection leaks visitor token and livechat messages

The Rocket.Chat application was affected by two NoSQL injection vulnerabilities. The first vulnerability allowed leaking visitor tokens by exploiting the livechat:loginByToken method, while the second vulnerability enabled leaking livechat messages by exploiting the livechat:loadHistory method...

Security Bulletin: IBM MQ Appliance vulnerable to "Terrapin" attack in OpenSSH (CVE-2023-48795)

Summary By manipulating sequence numbers during SSH connection setup, a MITM attacker can delete negotiation messages without causing a MAC failure. To mitigate this vulnerability, IBM MQ Appliance has removed the chacha20-poly1305 cipher and all etm HMACs from the default set of algorithms...

CVE-2024-27867

creationtimestamp| type| source ---|---|--- 2024-06-26 11:54:42+00:00| seen| https://t.me/thehackernews/5173 2024-06-26 13:07:09+00:00| seen| https://t.me/KomunitiSiber/2165 2024-06-26 13:27:11+00:00| seen| Telegram/nUusv8wAs3df-RSBbScbEiKoZR3ublMqAnpvOcQh5EQaA0 2024-06-26 14:23:40+00:00| seen|...

New Medusa Android Trojan Targets Banking Users Across 7 Countries

Cybersecurity researchers have discovered an updated version of an Android banking trojan called Medusa that has been used to target users in Canada, France, Italy, Spain, Turkey, the U.K., and the U.S. The new fraud campaigns, observed in May 2024 and active since July 2023, manifested through...

[SECURITY] Fedora 39 Update: python-dns-2.6.1-1.fc39

dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG authenticated messages and EDNS0. dnspython provides both high and low level access to DNS. The high level classes perform queries for data...

CVE-2024-38306 btrfs: protect folio::private when attaching extent buffer folios

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent buffer folios BUG Since v6.8 there are rare kernel crashes reported by various people, the common factor is bad page status error messages like this: BUG: Bad page state in...

Malicious code in kendo-react-messages (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-50719

creationtimestamp| type| source ---|---|--- 2024-06-25 11:22:27+00:00| seen| Telegram/7FLFIf95JGKfNqLMN-RJlQXHIDp1TN87HebSEVaBG6vKRw 2024-06-25 11:23:16+00:00| seen| https://t.me/realLulzSec/1070 2024-06-25 11:23:16+00:00| seen| https://t.me/realLulzSec/10111 2024-06-25 12:03:20+00:00|...

EulerOS 2.0 SP11 : python-cryptography (EulerOS-SA-2024-1844)

According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS server...

Conduit Security Vulnerabilities

Conduit is a simple, fast and reliable chat server from the individual developer Timo Kösters. A security vulnerability exists in Conduit v0.6.0 and earlier versions, which stems from a failure to check permissions when handling edits, resulting in a local user being able to edit any message from...

PT-2024-28290 · Unknown · Px4-Autopilot

Name of the Vulnerable Software and Affected Versions: PX4-Autopilot version 1.12.3 Description: A buffer overflow in the software allows attackers to cause a Denial of Service DoS via a crafted MavLink message. Recommendations: For PX4-Autopilot version 1.12.3, consider disabling the handling of...

Important: Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.33.0 security update & enhancements

Release of OpenShift Serverless Logic 1.33.0 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

PT-2025-3822

Name of the Vulnerable Software and Affected Versions Ruby affected versions not specified Description The Ruby interpreter is susceptible to the Marvin Attack, which leverages a covert timing channel to transmit data. This issue allows a remote attacker to decrypt previously encrypted messages o...

CVE-2024-3036 Communication DoS vulnerability

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2...