Vulnerability fixed in GeoServer

The developers of GeoServer have fixed a vulnerability. Proof-of-Concept PoC code for this vulnerability has appeared on the Internet. The vulnerability resides in the way XPath expressions are processed by the API and allows a malicious person to use specially prepared XPath expressions to execu...

CGA-RGFG-9MJX-R5W2

Bulletin has no description...

CGA-PRC3-GW5X-MX8P

Bulletin has no description...

CGA-432M-H64H-XHRH

Bulletin has no description...

CGA-V9F3-JQ7X-V7MH

Bulletin has no description...

CGA-H8QG-5GVG-76M6

Bulletin has no description...

CGA-HC5V-CQR3-5WR2

Bulletin has no description...

CGA-7RJ8-W6V8-64J6

Bulletin has no description...

CGA-G42V-QMX3-F28W

Bulletin has no description...

CGA-45F9-7HRP-HPWV

Bulletin has no description...

CGA-XMQF-PF6M-8W75

Bulletin has no description...

CGA-F54F-4HWG-V879

Bulletin has no description...

CGA-RH2X-RG2C-G5VX

Bulletin has no description...

CGA-FM5F-7CP4-VHM7

Bulletin has no description...

Exploit for CVE-2024-39211

CVE-2024-39211 Kaiten User Enumeration Kaitenhttps://kait...

CVE-2024-39683 ZITADEL Vulnerable to Session Information Leakage

ZITADEL is an open-source identity infrastructure tool. ZITADEL provides users the ability to list all user sessions of the current user agent browser. Starting in version 2.53.0 and prior to versions 2.53.8, 2.54.5, and 2.55.1, due to a missing check, user sessions without that information e.g...

CGA-WXWX-MFR5-9J7C

Bulletin has no description...

[R1] Tenable Identity Exposure Version 3.59.5 Fixes Multiple Vulnerabilities

R1 Tenable Identity Exposure Version 3.59.5 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 07/02/2024 - 13:24 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, curl, envoy, nodeJS were found to conta...

PT-2024-26015 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.13.0 Description: The issue is related to improper verification of intent by a broadcast receiver in Samsung Flow, allowing local attackers to copy image files to external storage. Recommendations: For...

PT-2024-18815 · Libsaped · Libsaped

Name of the Vulnerable Software and Affected Versions: libsaped versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper input validation in copying data to the buffer cache in libsaped, allowing local attackers to write out-of-bounds memory. This can be exploited by...