August 13, 2024—KB5041160 (OS Build 20348.2655)

None None...

PT-2024-28479 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 13.0.8, 14.1.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

The vulnerability in the billing system interface for Carbon Billing 5 allows a attacker to perform XSS attacks.

The vulnerability of the Carbon Billing 5 billing system interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

PT-2024-5548 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The vulnerability is related to a security feature bypass in Microsoft Windows, specifically in the Mark of the Web MoTW mechanism. This allows attackers to bypass SmartScreen...

The vulnerability of the multimedia platform GPAC, related to writing beyond memory boundaries, allows attackers to cause service failures.

The vulnerability of the multimedia platform GPAC is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Code Inspection control element in the CI/CD application integration and delivery system by JetBrains TeamCity allows attackers to perform cross-site scripting attacks.

The vulnerability of the Code Inspection control element in the CI/CD application integration and delivery system of JetBrains TeamCity is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-page...

Improving Apache httpd Protections Proactively with Orange Tsai of DEVCORE

...

Improving Apache httpd Protections Proactively with Orange Tsai of DEVCORE

...

CVE-2024-6977

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

CVE-2024-6977

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

CVE-2024-6977

Cato Networks Windows SDP Client has a vulnerability prior to version 5.10.34 where sensitive information can be written into trace/log files, potentially enabling an account takeover. The issue requires bypassing protections that modify the tunnel token on the attacker’s system. Affected softwar...

The vulnerability of the Roundup error detection system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Roundup error detection system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by downloading specially created malicious PDF, XML, and SVG files...

The vulnerability of the TinyMCE formatted text editor arises from the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the TinyMCE formatted text editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing

A Latin America LATAM-based financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate credential phishing activity, highlighting the abuse of the cloud computing model for malicious purposes. "Serverless architectures are attractiv...

The vulnerability in the web-based client of IBM Datacap software for document collection and processing allows attackers to execute cross-site scripting attacks, due to the lack of security measures taken to protect the structure of the web page.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

CVE-2022-48797

In the Linux kernel, the following vulnerability has been resolved: mm: don't try to NUMA-migrate COW pages that have other uses Oded Gabbay reports that enabling NUMA balancing causes corruption with his Gaudi accelerator test load: "All the details are in the bug, but the bottom line is that...

CVE-2022-48797

CVE-2022-48797 concerns a Linux kernel issue where NUMA balancing could alter COW page writability. The bug was traced to change_pte_range() using page_mapcount(page) to decide NUMA protection, which is incorrect; the recommended fix is to use page_count() (as reported by Oded Gabbay). Connected ...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...