310 matches found
CVE-2024-10120
A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
CVE-2024-10120
A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
CVE-2024-10120 wfh45678 Radar upload unrestricted upload
A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
CVE-2024-10120
CVE-2024-10120 (Radar) affects wfh45678 Radar versions up to 1.0.8. A vulnerability exists in the endpoint /services/v1/common/upload where the manipulation of the file argument enables unrestricted file upload. Exploitation can be performed remotely and has been disclosed publicly. Practical imp...
CVE-2024-10120 wfh45678 Radar upload unrestricted upload
A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
PT-2024-16044 · Unknown · Wfh45678 Radar
Name of the Vulnerable Software and Affected Versions: wfh45678 Radar versions up to 1.0.8 Description: A critical issue affects the Interface Handler component, allowing for authorization bypass through manipulation of the input /../. This can be initiated remotely and is not considered a path...
Radar 代码问题漏洞
Radar wind control engine is a lightweight real-time wind control engine by feihu.wang individual developers. A code issue vulnerability exists in Radar 1.0.8 and earlier versions, which stems from the parameter file in the file /services/v1/common/upload. which can lead to unlimited uploads...
Radar 安全漏洞
Radar wind control engine is a lightweight real-time wind control engine by feihu.wang individual developers. wfh45678 A security vulnerability exists in Radar version 1.0.8 and earlier, which stems from the component Interface Handler's manipulation of the input /.../ can lead to authorization...
PT-2024-16043 · Unknown · Wfh45678 Radar
Name of the Vulnerable Software and Affected Versions: wfh45678 Radar versions up to 1.0.8 Description: A critical issue has been found in the software, affecting unknown code in the file /services/v1/common/upload. The manipulation of the file argument leads to unrestricted upload. This can be...
Qualys VMDR Rated as the Only Leader and Outperformer by Independent Analyst Firm for the Second Consecutive Year
Qualys VMDR received the highest possible scores for risk-based assessment, cloud-native and serverless function scanning, and flexibility of deployment, among 20 vendors evaluated in this report. As the threat landscape evolves, vulnerability management remains a cornerstone of security...
kernel: wifi: ath11k: fix dfs radar event locking
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11kmacgetarbypdevid was not marked as a read-side critical section. Mark the code in question...
DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals
Monitoring evolving DDoS trends is essential for anticipating threats and adapting defensive strategies. The comprehensive Gcore Radar Report for the first half of 2024 provides detailed insights into DDoS attack data, showcasing changes in attack patterns and the broader landscape of cyber...
FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany
The U.S. Federal Bureau of Investigation FBI on Monday announced the disruption of online infrastructure associated with a nascent ransomware group called Radar/Dispossessor. The effort saw the dismantling of three U.S. servers, three United Kingdom servers, 18 German servers, eight U.S.-based...
The vulnerability of the “fields” parameter on the Pangeo Radar platform’s separate data storage and management system allows a hacker to execute arbitrary SQL queries against the database.
The vulnerability of the “fields” parameter on the Pangeo Radar platform’s separate data storage and management system is related to the lack of measures taken to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queri...
MAL-2024-2588 Malicious code in kwaishop-radar (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in kwaishop-radar (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @ks-radar/search (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @ks-radar/radar-send-web-log-collect (npm)
--- -= Per source details. Do not edit below this line.=-...