Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002-Reverse-Shell Este script demuestra cómo explot...

SolarWinds Access Rights Manager Trust Management Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A trust management issue vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to access the RabbitMQ management console...

Adobe Illustrator Resource Management Error Vulnerability (CNVD-2024-24292)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Illustrator versions 28.4 and 27.9.3, which stems from being affected by a reuse-after-release vulnerability. An attacker could...

Arbitrary File Read Vulnerability in LianSoft Secure Data Exchange System of Shenzhen LianSoft Technology Co.

Shenzhen LianSoft Technology Co., Ltd. is a company that focuses on the enterprise-level network security market, and its main business is to provide network security products and services for government and enterprise customers. Shenzhen LianSoft Technology Co., Ltd LianSoft security data exchan...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39674)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-23347)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which originates from an invalid memory access in the built-in analyzer, and can be exploited by an attacker to bypass security restrictions...

Fortinet FortiOS Denial of Service Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A denial of service vulnerability...

Huawei HarmonyOS and EMUI Alarm Clock Module Null Pointer Access Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A null pointer access vulnerability exists in the Huaw...

Google Android elevation of privilege vulnerability (CNVD-2024-27512)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in code in multiple locations. An attacker can exploit this vulnerability to cause an elevation of privilege...

RuvarOA txt_keyword Parameter SQL Injection Vulnerability

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which is caused by the lack of validation of the txtkeyword parameter of the getcompany.aspx file against externally entered SQL statements. An attacker can exploit this...

D-Link DIR-845L Cross-Site Scripting Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. A cross-site scripting vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which can be exploited by an attacker to execute script in the victim's web browser using a specially crafted URL...

IBM Cognos Controller SQL Injection Vulnerability

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. An SQL injection vulnerability exists in IBM Cognos...

Information leakage vulnerability in Tianrui Green Shield Approval System of Xiamen Tianrui Technology Co. Ltd (CNVD-2024-25622)

Xiamen Tianrui Technology Co., Ltd. is a provider of data security products and services. An information leakage vulnerability exists in the Tianrui Green Shield Approval System of Xiamen Tianrui Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Verizon’s 2024 DBIR Unpacked: From Ransomware Evolution to Supply Chain Vulnerabilities

As we delve into cybersecuritys complex and evolving landscape, the Verizon 2024 Data Breach Investigations Report DBIR offers crucial insights into the mechanisms and motives behind the latest wave of cyberattacks. Qualys is once again proud to contribute to the report, helping to dissect these...

Agent Tesla and Taskun Malware Targeting US Education and Govt Entities

By Deeba Ahmed Beware! Agent Tesla & Taskun Malware are targeting US Education & Gov. This cyberattack steals data & exploits vulnerabilities. Learn how to protect schools & government agencies from this double threat! This is a post from HackRead.com Read the original post: Agent Tesla and Tasku...

Mattermost Server Uncontrolled Resource Consumption Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. Mattermost Server suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to cause a denial of service by sending a large request path...

IBM Aspera Trust Management Issues Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. IBM Aspera Faspex has a trust management issue vulnerability that stems from improper encryption of certain data. An attacker could exploit the vulnerability ...

Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Easyappointments

CVE-2022-0482 Vulnerability Exploitation Introduction This...

PT-2024-4007

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Server versions 1.0.0 through 1.3.0 Description: The issue affects Apache HugeGraph-Server, allowing unauthenticated remote code execution and server takeover. This flaw can be exploited by attackers to bypass sandbox...

Google Chrome Data Validation Error Vulnerability (CNVD-2024-29288)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a data validation error vulnerability that can be exploited by attackers to bypass security restrictions...