CVE-2024-11156 Rockwell Automation Arena® Out of Bounds Write Vulnerability

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit thi...

Cisco Releases Security Updates for NX-OS Software

Cisco released security updates to address a vulnerability in Cisco NX-OS software. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the following advisory and apply the necessary updates: Cisco NX-OS...

Exploit for Improper Authentication in Projectsend

CVE-2024-11680 PoC Exploit This repository contains a Proof of...

Ruijie Reyee OS (Update A)

RISK EVALUATION Successful exploitation of this vulnerabilities could allow attackers to take near full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

IT threat evolution in Q3 2024. Non-mobile statistics

IT threat evolution in Q3 2024 IT threat evolution in Q3 2024. Non-mobile statistics IT threat evolution in Q3 2024. Mobile statistics The statistics presented here are based on detection verdicts by Kaspersky products and services received from users who consented to providing statistical data...

Oracle Linux 9 : webkit2gtk3 (ELSA-2024-10472)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10472 advisory. 2.46.3-2 - Add patch for CVE-2024-44309 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Acronis Cyber Protect/Backup machine info disclosure

Acronis Cyber Protect or Backup is an enterprise backup/recovery solution for all, compute, storage and application resources. Businesses and Service Providers are using it to protect and backup all IT assets in their IT environment. This module exploits an authentication bypass vulnerability at...

CVE-2024-50358

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by authenticated users by restoring a tampered...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in its ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a attacker to execute arbitrary code using specially...

The vulnerability of the hypervisor in FreeBSD operating systems allows a hacker to execute arbitrary code.

The vulnerability of the hypervisor in FreeBSD operating systems relates to a single-shift error. Exploiting this vulnerability allows an attacker to execute arbitrary code...

mySCADA myPRO Manager Access Control Error Vulnerability

mySCADA myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An access control error vulnerability exists in mySCADA myPRO Manager, which can be exploited by an attacker to submit a special request for unauthorized access to...

mySCADA myPRO Manager

RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands or disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...

Linux kernel uncontrolled resource consumption vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An uncontrolled resource consumption vulnerability exists in the Linux kernel, which stems from failure to free memory after its effective lifetime, and can be exploited by an...

Arbitrary File Download Vulnerability in DMagent of Damon 8 Database of Wuhan Damon Database Co.

Founded in 2000, Wuhan Damon Database Co., Ltd. is a leading database product development service provider in China. There is an arbitrary file download vulnerability in the DMagent of the Damon 8 database of Wuhan Damon Database Co., Ltd. that can be exploited by attackers to obtain sensitive...

Lunary Information Disclosure Vulnerability

lunary is lunary open source a production toolkit for LLM . lunary suffers from an information disclosure vulnerability that stems from the fact that tokens can be exposed to unauthorized actors, allowing them to perform operations on behalf of the user. An attacker could exploit this vulnerabili...

lunary information disclosure vulnerability (CNVD-2025-08811)

lunary is lunary open source a production toolkit for LLM . lunary has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co., Ltd (CNVD-2024-49053)

Dongsheng Logistics Software is a logistics management software integrating order management, warehouse management, transportation management and other functions of Qingdao Dongsheng Weiye Software Co. There is an information leakage vulnerability in Dongsheng Logistics Software of Qingdao...

CVE-2024-43189

IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2024-45322)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V. An attacker could exploit this vulnerability to cause a denial of service...

Google Android Information Disclosure Vulnerability (CNVD-2024-49504)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...