Code injection

Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636...

Studio Network Solutions ShareBrowser Security Vulnerability

Studio Network Solutions ShareBrowser is a professional live production shared storage management software from Studio Network Solutions. A security vulnerability exists in Studio Network Solutions ShareBrowser versions prior to 7.0 that stems from misuse of signature verification...

Oracle Linux 9 : .NET / 8.0 (ELSA-2024-0152)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0152 advisory. 8.0.101-1.0.1 - Update to .NET SDK 8.0.101 and Runtime 8.0.1 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2023-44077

Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636...

The vulnerability of the Microsoft Visual Studio software development tool lies in the insecure management of privileges, which allows a malicious actor to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-44077

Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636...

CVE-2023-44077

Studio Network Solutions ShareBrowser for macOS is affected by CVE-2023-44077. The issue is a mishandling of signature verification in ShareBrowser versions prior to 7.0, which is the root cause described across Red Hat, NVD, CNNVD, and PT-2024-13170 sources. The vulnerability impacts ShareBrowse...

Oracle Linux 9 : .NET / 7.0 (ELSA-2024-0151)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0151 advisory. 7.0.115-1.0.1 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the...

CVE-2024-23347

Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application...

CVE-2024-23347

Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application...

CVE-2024-23347

Summary: CVE-2024-23347 affects Meta Spark Studio versions prior to v176. When opening a new project, the application can execute scripts defined in the project’s package.json, enabling arbitrary code execution with the app’s privileges. This is caused by the package.json scripts being run automa...

CVE-2024-23347

Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application...

CVE-2024-23347

Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application...

Meta Spark Studio Security Vulnerability

Meta Spark Studio is an application for the Meta Spark community. A security vulnerability exists in versions prior to Meta Spark Studio v176, which stems from when opening a new project, Meta Spark Studio executes a script defined within the package.json file to execute arbitrary code on the...

Lateral Movement – Visual Studio DTE

A lot of organizations have some sort of application development program and it is highly likely that developers will utilize Visual Studio for their development… Continue reading - Lateral Movement - Visual Studio DTE...

Lateral Movement – Visual Studio DTE

A lot of organizations have some sort of application development program and it is highly likely that developers will utilize Visual Studio for their development… Continue reading - Lateral Movement - Visual Studio DTE...

RHEL 7 : .NET 6.0 (RHSA-2024:0255)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0255 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has a vulnerability related to the restoration of unreliable data in memory. This vulnerability allows an intruder to gain increased privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

AlmaLinux 8 : .NET 8.0 (ALSA-2024:0150)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0150 advisory. - Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability CVE-2024-0056 - NET, .NET Framework, and Visu...

Oracle Linux 9 : .NET / 6.0 (ELSA-2024-0156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0156 advisory. 6.0.126-1.0.1 - Add support for Oracle Linux 6.0.126-1 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 6.0.125-1 - Update to .NET SDK 6.0.125 and Runti...