Patch now! Fortra GoAnywhere MFT vulnerability exploit available

On January 22, 2024, software company Fortra warned customers about a new authentication bypass vulnerability impacting GoAnywhere MFT Managed File Transfer that allows an attacker to create a new admin user. Fortra GoAnywhere MFT is a file transfer solution that organizations use to exchange the...

VectorAdmin Authorization Issues Vulnerability

VectorAdmin is a generalized suite of tools for vector database administration. VectorAdmin suffers from an authorization issue vulnerability that stems from the inclusion of an authentication bypass in vector-admin that allows a user to register to vector-admin while domain restriction is active...

The vulnerability of the Find My function in macOS, iOS, and iPadOS allows a perpetrator to disclose protected information.

The vulnerability of the Find My function in macOS, iOS, and iPadOS relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the RapidDiag diagnostic tool on the Splunk Enterprise operating environment allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the RapidDiag diagnostic tool for the Splunk Enterprise operating environment is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-35837

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

PT-2024-12514 · Solax · Solax Pocket Wifi

Name of the Vulnerable Software and Affected Versions: SolaX Pocket WiFi versions 3 through 3.001.02 Description: An issue was discovered where authentication for the web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default passwor...

The vulnerability of the Sandbox component of the macOS operating system, which allows a violator to disclose protected information

The vulnerability of the Sandbox component in the macOS operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a hacker to disclose protected information...

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that should be protected...

CVE-2024-0774

A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack...

Memory corruption

A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack...

CVE-2024-0772

A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attac...

CVE-2024-0772

A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attac...

Memory corruption

A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attac...

CVE-2024-0774 Any-Capture Any Sound Recorder Registration memory corruption

A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack...

Any-Capture Any Sound Recorder Buffer Error Vulnerability

Any-Capture Any Sound Recorder is a powerful tool from Any-Capture open source to record audio/voice/sound from a microphone or other audio device. A buffer error vulnerability exists in Any-Capture Any Sound Recorder version 2.93, which stems from unknown code contained in the component...

CVE-2024-0772 Nsasoft ShareAlarmPro Registration memory corruption

A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attac...

CVE-2024-0772 Nsasoft ShareAlarmPro Registration memory corruption

A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attac...

CVE-2024-0771

A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. An attack has to be approache...