CVE-2024-34722

In smpprocrand of smpact.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the im_convert_path/im_identify_path function in the RoundCube Webmail client allows a hacker to exploit their privileges.

The vulnerability of the imconvertpath/imidentifypath function in the RoundCube Webmail email client is related to the lack of measures taken at the administrative level to clean up data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

PT-2024-5480 · Microsoft · Groupme

Name of the Vulnerable Software and Affected Versions: GroupMe affected versions not specified Description: The issue is related to insufficient restriction of excessive authentication attempts in GroupMe, allowing a remote, unauthenticated attacker to elevate privileges over a network...

PT-2024-3968 · Tibco · Tibco Managed File Transfer Platform Server

Name of the Vulnerable Software and Affected Versions: TIBCO Managed File Transfer Platform Server affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the server. It allows a remote attacker to bypass security restrictions using a...

The vulnerability of D-Link DIR-600 router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to increase their privileges.

The vulnerability of D-Link DIR-600 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by intercepting authentication requests remotely...

The vulnerability of the system representations pg_stats_ext and pg_stats_ext_exprs in the PostgreSQL database allows a perpetrator to enhance their privileges.

The vulnerability of the system representations pgstatsext and pgstatsextexprs in the PostgreSQL database is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

RHEL 5 : libexif (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libexif: out of bounds write due to an integer overflow in exif-entry.c CVE-2020-0452 - A vulnerability w...

CVE-2023-50231

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploi...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.01, which stems from a problem with the component...

CVE-2024-28613

SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...

PT-2024-3332 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router versions v1.01KRb03 and before Description: The issue is related to a Permission Bypass vulnerability via the getcfg.php component. It is associated with inadequate access control when handling the AUTHORIZED GROUP...

CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 for MT6XXX chipsets / WCNCR00363530...

CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 for MT6XXX chipsets / WCNCR00363530...

CVE-2024-20040

CVE-2024-20040 affects MediaTek WLAN firmware (MT6XXX/MT79XX) and stems from an out-of-bounds write caused by improper input validation. This could enable remote escalation of privilege with no additional execution privileges required and no user interaction. The CVSSv3.1 base score is 8.8 (HIGH)...

CVE-2024-28421

SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php...

PT-2024-22425 · Razor · Razor

Name of the Vulnerable Software and Affected Versions: Razor version 0.8.0 Description: The issue allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the channelmodle.php. This is a SQL Injection vulnerability. Recommendations: For Razor version 0.8.0, consid...

PrestaShop Best-Kit Pop-up Security Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Best-Kit Pop-up v.1.7.2 and earlier versions, which stems from...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-26566

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

PT-2024-20033 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth versions affected versions not specified Description: The issue is related to improper input validation in the access secure service from temp bond function of btm sec.cc, which could allow keystroke injection. This might lead to...