PT-2024-32394 · Unknown · Meshtastic

Name of the Vulnerable Software and Affected Versions: Meshtastic versions prior to 2.5.1 Description: Meshtastic is an open source, off-grid, decentralized, mesh network that uses MQTT to communicate over an internet connection to a shared or private MQTT Server. Nodes can communicate directly v...

PT-2024-38934 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description: The issue is related to an insecure deserialization vulnerability, which allows for a code execution attack. This vulnerability can be exploited remotely. Recommendations: F...

Flowise security vulnerabilities

Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in versions prior to Flowise 2.1.1 that stems from a lack of input cleanup, resulting in vulnerability to stored cross-site scripting attacks...

CVE-2024-9122

Type Confusion in V8 of Google Chrome (Chromium) prior to 129.0.6668.70 allows remote attackers to cause out-of-bounds memory access via a crafted HTML page. Affected products include Chromium/Chrome; vulnerable component is V8. Public references in connected documents confirm the issue and indic...

PT-2024-31700 · Cursor · Cursor

Name of the Vulnerable Software and Affected Versions: Cursor versions prior to 0.41.0 Description: The issue affects Cursor, an artificial intelligence code editor, on macOS. If a user has granted Cursor access to the camera or microphone, any program run on the machine can access these devices...

PT-2024-39057 · Franklin Fueling Systems · Ts-550 Evo

Name of the Vulnerable Software and Affected Versions: Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 Description: The issue allows an attacker to read a file arbitrarily, potentially obtaining administrator credentials. Recommendations: For Franklin Fueling Systems TS-550 EVO...

PT-2024-38543 · Exnet Informatics · Ferry Reservation System

Name of the Vulnerable Software and Affected Versions: Exnet Informatics Software Ferry Reservation System versions prior to 240805-002 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQ...

PT-2024-7006

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.7 Description The issue is related to errors in checking the JA4 identifier, which provides information about the application protocol to be used between the client and server. Exploitation of this issue can allo...

Planet Fitness Workouts Trust Management Vulnerability

Planet Fitness Workouts is a fitness-related application from Planet Fitness. A trust management issue vulnerability exists in Planet Fitness Workouts versions prior to 9.8.12 that stems from a failure to properly validate TLS certificates. An attacker could exploit the vulnerability to obtain...

AZL-49651 CVE-2024-45769 affecting package pcp for versions less than 6.3.2-1

A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash...

SUSE CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

PT-2024-31817 · Kastle Systems · Kastle Systems Firmware

Name of the Vulnerable Software and Affected Versions: Kastle Systems firmware prior to May 1, 2024 Description: The issue concerns a hard-coded credential in the firmware, which, if accessed, may allow an attacker to access sensitive information. Recommendations: For Kastle Systems firmware prio...

Puma security vulnerabilities

Puma is a web server for highly concurrent applications by Evan Phoenix, an individual developer in the United States. A security vulnerability exists in Puma versions prior to 6.4.3, which stems from a client being able to override values set by an intermediate proxy by supplying an underscored...

PT-2024-12138 · Dragonfly · Dragonfly

Name of the Vulnerable Software and Affected Versions: Dragonfly versions prior to 2.0.9 Description: The issue concerns Dragonfly, an open-source P2P-based file distribution and image acceleration system. It uses JWT to verify users, but the secret key for JWT is hardcoded, leading to...

Envoy security vulnerabilities

Envoy is an Enphase open source gateway program for connecting smart home devices. A security vulnerability exists in versions prior to Envoy 1.32.0 that stems from allowing an external client to manipulate the Envoy header, which can lead to unauthorized access or other malicious operations with...

mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2

The Mozilla Foundation's Security Advisory: Memory safety bugs are present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort, some of these could have been exploited to run arbitrary code...

UBUNTU-CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

Eliz Panel SQL injection vulnerability

Eliz Panel is a control panel from Eliz Corporation. A SQL injection vulnerability exists in Eliz Panel versions prior to 2.3.24, which arises from an improper neutralization of a particular element used, allowing commands to be executed via SQL injection...

PT-2024-37272 · Eliz · Eliz Software Panel

Name of the Vulnerable Software and Affected Versions: Eliz Software Panel versions prior to 2.3.24 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2025-46927

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 129.0.6668.58 Description A flaw exists in the handling of Intents in Google Chrome on Android. This issue could allow a remote attacker to perform UI spoofing by using a specially crafted HTML page...