CVE-2024-33006

An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system...

CVE-2024-42452

A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability...

CVE-2024-24578

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution RCE vulnerability, caused by multiple issues within the Java based HMIPServer.jar component...

Ubuntu: Security Advisory (USN-7238-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-48931

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint http:///v3/file?token== is vulnerable to arbitrary file reading due to improper input validation. By manipulating the files parameter,...

CVE-2024-26294

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2024-26298

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2024-26296

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2024-26297

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2024-26295

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

Malicious code in user-switching (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7fc39d9c8105160aa7fcc6bb7515e59849b685663983bbb69a16c9ed10437e Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

Malicious code in bookingcom-connect (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eabf241162aa1ee247ac5a5b7d62ec16b3d85b386a0ec3ee2b266fd5d57ce0f Any computer that has this package installed or running should be considered...

Malicious code in ibm.github.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af453f19a328ea28db57d39cc9c120b102b0ba80e4c420727d562290f49d5ec5 Any computer that has this package installed or running should be considered...

Malicious code in hosted-wallet-page (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede0235fd9b473e8e196c7b36ea76c1a910d85843bf453363798303f16b05625 Any computer that has this package installed or running should be considered...

Malicious code in bloomr-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cdde3ae6c9937d627a631cbc983d91ed46038b8b046d70da1b3cb38b20e723 Any computer that has this package installed or running should be considered...

Malicious code in files_texteditor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8300e0a9e342d3f367926d386b6b4bae31717dcd23f9fa09f78751d38766021 Any computer that has this package installed or running should be considered...

Malicious code in custom-filter-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd97872144cfcf29d6340b6d2b80e3ed243255bdecaa0673d71da8598a5e5b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in moonpay-websdk-buy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385edbb240f2ac3d9a5e81e74c03777fa5ae2609b83e2661407f3840312b1f72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firehose-poc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf904e76972bcc2c5a275af86c2f0562ac2be401605c8b36b8e3c886a5a985ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...