Google Chrome Security Bypass Vulnerability (CNVD-2024-13762)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is due to an improper implementation in site isolation. An attacker can exploit this vulnerability to bypass security restrictions...

Denial of Service Vulnerability in Damon New Cloud Cache Database (DMCDM)

Damon New Cloud Cache Database DMCDM is a self-developed Key-Value database that is deeply compatible with the native Redis protocol. A denial of service vulnerability exists in Damon New Cloud Cache Database DMCDM, which can be exploited by attackers to cause a denial of service...

Microsoft Outlook Elevation of Privilege Vulnerability (CNVD-2024-34109)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to elevate privileges...

Autodesk AutoCAD Security Vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from the American company Autodesk. A security vulnerability exists in Autodesk AutoCAD. An attacker can exploit the vulnerability to execute code in the current process...

Oracle MySQL Denial of Service Vulnerability (CNVD-2024-09900)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A denial of service vulnerability exists in MySQL Server, which can be exploited by an attacker to cause an application to hang or crash frequently a...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to bypass security restrictions

The vulnerability of the Windows operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...

Ivanti Policy Secure 9.x / 22.x Multiple Vulnerabilities

The Ivanti Policy Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in the web component of Ivanti Policy Secure 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted...

How to Prepare for a Cyberattack

Deciphering the Cyber Invasion Terrain We exist in an era deeply entrenched in digital dependence, where cyber invasions present significant risks for companies, government establishments, and solitary users. As we hurdle deeper into the digital era, the art of cyber misdemeanors continues to...

Design/Logic Flaw

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends...

Denial of Service Vulnerability in Damon Database

Damon Database Management System is a high-performance database management system with completely independent intellectual property rights launched by Wuhan Damon Database Co. A denial of service vulnerability exists in Damon Database, which can be exploited by attackers to cause a denial of...

PCMan FTP Server Denial of Service Vulnerability (CNVD-2025-10876)

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server has a denial of service vulnerability that originates from the component STOR Command Handler, which can be exploited by an attacker to cause a denial of service...

Google Chrome Security Bypass Vulnerability (CNVD-2024-07829)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from improper implementation of the Downloads module. An attacker could exploit this vulnerability to bypass security restrictions...

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

It is an exploit module targeting the GoAnywhere MFT vulnerabili...

CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

CVE-2023-49254 Command injection in the network test tools

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

TOTOLINK T6 Access Control Error Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK T6 version 4.1.9cu.5241B20210923, which originates from an access control error in the file /cgi-bin/cstecgi.cgi. An attacker could exploit this vulnerabilit...

GTKWave integer overflow vulnerability (CNVD-2024-37751)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

Google Android Information Disclosure Vulnerability (CNVD-2024-16935)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Tenda AX3 Code Execution Vulnerability

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A code execution vulnerability exists in Tenda AX3 version v16.03.12.11, which stems from the list parameter in /goform/SetNetControlList failing to correctly filter the special elements of the constructed...