CVE-2024-38197

Microsoft Teams for iOS Spoofing Vulnerability...

CVE-2024-38161

Windows Mobile Broadband Driver Remote Code Execution Vulnerability...

CVE-2024-38161

Windows Mobile Broadband Driver Remote Code Execution Vulnerability...

CVE-2024-38161 Windows Mobile Broadband Driver Remote Code Execution Vulnerability

...

CVE-2024-38161

Technical details for CVE-2024-38161 (Windows Mobile Broadband Driver RCE) are not provided in the connected documents. Monitor for vendor advisories (MSRC/MSKB) for disclosure, affected products/versions, fixes, and mitigations.

CVE-2024-38161 Windows Mobile Broadband Driver Remote Code Execution Vulnerability

...

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

...

CVE-2024-33003

Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information PII data, such as passwords, email addresses, mobile numbers, coupon codes, and voucher codes, to be included in the request URL as query or path parameters. On successful exploitation, this could lead to a Hi...

CVE-2024-33003

CVE-2024-33003 affects SAP Commerce Cloud via the OCC API Endpoint component. The root issue is that certain OCC API endpoints may include PII (passwords, emails, mobile numbers, coupon/voucher codes) in the request URL as query or path parameters, leading to potential disclosure and integrity im...

Microsoft Windows Mobile Broadband Driver 安全漏洞

Microsoft Windows Mobile Broadband Driver is a driver from Microsoft USA that allows the Windows operating system to communicate with mobile broadband devices. A security vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker exploiting this vulnerability could remotely...

PT-2024-8681

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions 6.3.1 Description A NULL pointer dereference exists in the WLAvalancheService component of Ivanti Avalanche. This issue allows a remote, unauthenticated attacker to cause a denial-of-service DoS condition by crashing...

CVE-2024-7697

Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...

CVE-2024-7697

Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...

CVE-2024-7697 Logical vulnerability in com.transsion.carlcare

Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...

CVE-2024-7697

CVE-2024-7697 affects the mobile app com.transsion.carlcare and is described as a logical vulnerability that may lead to user information leakage. CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges, no user interaction required. The connected document...

CVE-2024-7697 Logical vulnerability in com.transsion.carlcare

Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...

PT-2024-6523 · Cisco · Cisco Expressway Edge

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Edge Expressway-E affected versions not specified Description: A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This issu...

PT-2024-38507 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A problematic issue has been found in the file adds.php, where the manipulation of the argument name, dob, email, mobile, or address leads to cross-site...

Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs

The vulnerabilities, which have been patched, may have novel appeal to attackers as an avenue to compromising phones...

The vulnerability of the GroupMe mobile messaging app, related to insufficient limits on authentication attempts, allows a hacker to elevate their privileges.

The vulnerability of the GroupMe mobile messaging app relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...