SUSE CVE-2023-52668

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix lock ordering in btrfszoneactivate The btrfs CI reported a lockdep warning as follows by running generic generic/129. WARNING: possible circular locking dependency detected 6.7.0-rc5+ 1 Not tainted...

DarkGate Malware: Persistent Threat in Active Distribution

...

CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added two security flaws impacting D-Link routers to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of vulnerabilities is as follows - CVE-2014-100005 - A cross-site...

Invoke-SessionHunter - Retrieve And Display Information About Active User Sessions On Remote Computers (No Admin Privileges Required)

Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs associated with active...

CVE-2024-32047 CyberPower PowerPanel business Active Debug Code

Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gaining access to the testing or production server...

The vulnerability of the __i915_vma_active() function in the drivers/gpu/drm/i915/i915_vma.c file of the Intel graphics adapter driver for Linux-based systems can be exploited by attackers to cause service interruptions.

The vulnerability of the i915vmaactive function in the drivers/gpu/drm/i915/i915vma.c file of the Intel 8xx/9xx/G3x/G4x/HD graphics controller driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

CVE-2024-27942

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of...

CVE-2024-4129

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation

Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-4761, is an out-of-bounds write bug impacting the V8 JavaScript and WebAssembly engine. It wa...

May 14, 2024—KB5037765 (OS Build 17763.5820) - EXPIRED

None None...

May 14, 2024—KB5037770 (OS Build 22000.2960)

None None...

Siemens RUGGEDCOM CROSSBOW 访问控制错误漏洞

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. A security vulnerability exists in Siemens RUGGEDCOM CROSSBOW due to an affected system allowing any unauthenticated client to disconnect any active user from the server. An attacker could exploit this...

PT-2024-5192 · Siemens · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.5 Description: The issue is related to a lack of authentication for a critical function, allowing a remote attacker to cause a denial of service. The affected systems permit any unauthenticated client t...

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

...

RHEL 6 : samba (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - samba: Active Directory AD domain user could become root on domain members CVE-2020-25717 - samba:...

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

CVE-2024-4129

The provided data confirms CVE-2024-4129: Snow Software AB Snow License Manager for Windows (versions 9.33.2–9.34.0) contains an Improper Authentication flaw that allows a network attacker to bypass authentication when Active Directory Authentication is enabled. Affected component/condition: Snow...

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

PT-2024-29348 · Snow · Snow License Manager

Name of the Vulnerable Software and Affected Versions: Snow License Manager versions 9.33.2 through 9.34.0 Description: The issue is related to an Improper Authentication vulnerability that allows a networked attacker to bypass authentication in Snow License Manager on Windows when Active Directo...

TBK DVR devices OS Command Injection Vulnerability (Apr 2024) - Active Check

TBK DVR devices are prone to an OS command injection vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...