The vulnerability of the wireless router web services of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 allows a hacker to execute arbitrary code.

The vulnerability of the wireless router web services from D-Link, namely DIR-X4860, DIR-X5460A1, and COVR-X1870, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the device...

Vulnerability of cryptographic services of Windows operating systems, allowing attackers to gain unauthorized access to protected information

The vulnerability of cryptographic services in Windows operating systems is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the wireless router web services of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 allows a hacker to execute arbitrary code.

The vulnerability of the wireless router web services of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the device...

CVE-2024-21281

Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.7.0.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2024-21284

CVE-2024-21284 affects Oracle Banking Liquidity Management (Oracle Financial Services Applications), component Reports, in version 14.5.0.12.0. The vulnerability can be exploited by a low-privileged attacker with HTTP network access, requiring user interaction, and can lead to takeover of the aff...

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server which also serves protocols other than dnsserver will be restarted after a short delay but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate but many RPC services will not.

...

The Samba AD DC administration tool when operating against a remote LDAP server will by default send new or reset passwords over a signed-only connection.

...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and property management. A security vulnerability exists in Oracle Banking Liquidity Management version 14.5.0.12.0 of Oracle Financial...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and property management. A security vulnerability exists in Oracle Banking Liquidity Management version 14.5.0.12.0 of Oracle Financial...

Helmholz REX200/250 安全漏洞

The Helmholz REX200/250 is a wireless router from Helmholz. A security vulnerability exists in the Helmholz REX200/250 versions prior to 5.1.11, which originates from an unauthenticated, remote attacker who can brute-force the credentials of the Remote Services Portal, resulting in a loss of...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and property management. A security vulnerability exists in Oracle Banking Liquidity Management version 14.7.0.6.0 of Oracle Financial...

Medium: aws-cfn-bootstrap

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

PT-2024-8108

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Certificate Services affected versions not specified Description An elevation-of-privilege issue exists in Microsoft Active Directory Certificate Services. Exploitation of this issue may allow an attacker to elevate...

Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation

The Dutch police have announced the takedown of Bohemia and Cannabia, which has been described as the world's largest and longest-running dark web market for illegal goods, drugs, and cybercrime services. The takedown is the result of a collaborative investigation with Ireland, the United Kingdom...

The vulnerability of BranchCache caching technology in Microsoft Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of BranchCache caching technology in Microsoft Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

BITS performance counters not working after publishing App Layering image to PVS

When you published an image from App Layering to PVS, Target Devices may not show BITS performance counters...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to access control errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2024-9802 Conformance validation endpoint discloses detail about service to unauthenticated users

The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific information about the service, including available endpoints, and swagger. It could advise about the running version of a service to an attacker. The...

CVE-2024-9798

CVE-2024-9798 concerns a public health endpoint that reveals a list of onboarded services. Connected sources tie this to Zowe API Mediation Layer health endpoint exposure, describing the impact as potentially valuable information for attackers and identifying a remediation path. Affected componen...

CVE-2024-9798 Health endpoint offers list of onboarded services to unauthenticated users

The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers...