OpenText Operations Agent Security Vulnerability

OpenText Operations Agent is a software from OpenText Canada used to manage and monitor OpenText products and solutions. A security vulnerability exists in OpenText Operations Agent versions 12.15, 12.20 through 12.25. An attacker could exploit the vulnerability to escalate privileges...

GHSA-9X7F-GWXQ-6F2C

creationtimestamp| type| source ---|---|--- 2024-02-01 22:06:52+00:00| seen| https://t.me/ctinow/177794 2025-03-25 20:45:26+00:00| seen| https://gist.github.com/FuzzysTodd/a25832bda87aee97912ff5c363392c03...

CVE-2024-0402

creationtimestamp| type| source ---|---|--- 2024-01-26 02:26:35+00:00| seen| https://t.me/ctinow/173953 2024-01-26 11:56:47+00:00| seen| https://t.me/ctinow/174171 2024-01-26 12:46:40+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4239 2024-01-28 13:16:07+00:00| seen|...

CVE-2024-0291

creationtimestamp| type| source ---|---|--- 2024-01-11 19:31:32+00:00| seen| https://t.me/ctinow/166738 2024-01-25 08:41:26+00:00| seen| https://t.me/ctinow/173323...

PT-2024-10238

Name of the Vulnerable Software and Affected Versions IBM DevOps Velocity version 5.0.0 IBM UrbanCode Velocity versions 4.0.0 through 4.0.25 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive...

CVE-2023-52222

creationtimestamp| type| source ---|---|--- 2024-01-08 20:26:57+00:00| seen| https://t.me/ctinow/164600 2024-01-25 16:56:31+00:00| seen| https://t.me/ctinow/173578...

GHSA-C2F4-CVQM-65W2

creationtimestamp| type| source ---|---|--- 2024-01-08 17:12:01+00:00| seen| https://t.me/ctinow/164496 2024-01-25 12:11:24+00:00| seen| https://t.me/ctinow/173396...

RHSA-2024:0006

creationtimestamp| type| source ---|---|--- 2024-01-02 09:16:48+00:00| seen| https://t.me/ctinow/161601...

CVE-2022-47531

An issue was discovered in Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell...

PT-2023-26030 · Softing · Softing Opc Suite

Name of the Vulnerable Software and Affected Versions: Softing OPC Suite versions 5.25 and before Description: The issue is related to Incorrect Access Control, allowing attackers to obtain sensitive information via weak permissions in the OSF discovery service. This could enable changes to the...

HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...

Gibbon Security Vulnerabilities

Gibbon is a school platform that solves real-world problems that educators encounter every day. A security vulnerability exists in GibbonEdu Gibbon version 25.0.0 that stems from the presence of a directory traversal vulnerability. An attacker can exploit the vulnerability by setting the...

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2023-42539

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data...

PT-2023-28405 · Samsung · Samsung Health

Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.25 Description: The issue allows local attackers to access data through PendingIntent hijacking in the ChallengeNotificationManager. Recommendations: For versions prior to 6.25, update to version 6.25 or lat...

CVE-2023-24410

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin –...

ILIAS Security Vulnerabilities

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS version 7.25 that originates from allowing any authenticated user to remotely execute arbitrary operating system commands...

CVE-2023-45142

creationtimestamp| type| source ---|---|--- 2023-10-12 13:11:24+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr 2023-10-12 20:23:27+00:00| seen| https://t.me/cibsecurity/72188 2025-01-28 13:36:28+00:00| seen|...

SUSE CVE-2023-42115

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens ...

SUSE CVE-2023-42119

Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp...