CVE-2024-32002

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...

ALPINE-CVE-2024-32002

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...

AZL-42040 CVE-2024-32002 affecting package git for versions less than 2.39.4-1

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...

UBUNTU-CVE-2024-32004

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1,...

CVE-2024-29895

creationtimestamp| type| source ---|---|--- 2024-05-14 14:35:15+00:00| published-proof-of-concept| https://t.me/HackingInsights/409 2024-05-14 14:37:41+00:00| published-proof-of-concept| https://t.me/itsecnews/4427 2024-05-14 17:28:38+00:00| published-proof-of-concept| https://t.me/proxybar/2073...

PT-2024-3500 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Adobe Acrobat 2020 Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the...

PT-2024-3504 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.2 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2024-3635 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.5, 2022.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Framemaker that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...

PT-2024-3772 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: The issue is related to a memory corruption vulnerability while parsing specially crafted IGS files, which could allow an attacker to execute code in the context of the current process. Thi...

PT-2024-3747

Name of the Vulnerable Software and Affected Versions: Git versions prior to 2.45.1 Git versions prior to 2.44.1 Git versions prior to 2.43.4 Git versions prior to 2.42.2 Git versions prior to 2.41.1 Git versions prior to 2.40.2 Git versions prior to 2.39.4 Description: The issue exists due to a...

PT-2024-3672 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V224.0 Update 2 Description: A heap-based buffer overflow issue has been identified in the application while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the...

PT-2024-3669 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.2, 23.0.5 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a...

PT-2024-3681 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: The issue is related to a type confusion vulnerability when parsing IGS files. This could allow an attacker to execute code in the context of the current process by opening specially crafte...

CVE-2024-21115

creationtimestamp| type| source ---|---|--- 2024-05-11 07:32:04+00:00| published-proof-of-concept| https://t.me/HackingInsights/277 2024-05-11 18:00:47+00:00| published-proof-of-concept| https://t.me/HackingInsights/330...

GHSA-FR5H-RQP8-MJ6G

creationtimestamp| type| source ---|---|--- 2024-05-10 12:02:39+00:00| published-proof-of-concept| https://t.me/poxek/4009 2024-05-10 12:42:38+00:00| published-proof-of-concept| https://t.me/hackingbra/126 2024-05-25 15:30:14+00:00| published-proof-of-concept| https://t.me/dilagrafie/3248...

CVE-2024-34072 Deserialization of Untrusted Data in sagemaker-python-sdk

sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.basedeserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently ma...

CVE-2024-34072

Summary (CVE-2024-34072) : The sagemaker-python-sdk’s sagemaker.base_deserializers.NumpyDeserializer module before v2.218.0 is vulnerable to unsafe deserialization of untrusted pickled numpy object arrays. This can enable a local attacker to achieve remote code execution, denial of service, and i...

CVE-2023-27360 NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2024-4348

creationtimestamp| type| source ---|---|--- 2024-05-02 22:31:13+00:00| seen| https://t.me/arpsyndicate/4910 2024-05-04 08:06:46+00:00| seen| https://t.me/arpsyndicate/4921...

golang: regexp/syntax: limit memory used by parsing regexps

A flaw was found in the golang package, where programs that compile regular expressions from untrusted sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is linear in the input size. Still, in some cases, the constant factor can be as high as...