CVE-2024-47906

Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.2 Not Applicable to 9.1Rx allows a local authenticated attacker to escalate privileges...

CVE-2024-47904

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The affected devices contain a SUID binary that could allow an...

CVE-2024-29187

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it'...

CVE-2024-1491

The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flash, or internal flash program memory...

CVE-2024-6714

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege...

[SECURITY] Fedora 40 Update: fastd-23-1.fc40

fastd is a secure tunneling daemon with some unique features: - Very small binary about 100KB on OpenWRT in the default configuration, including all dependencies besides libc - Exchangable crypto methods - Transport over UDP for simple usage behind NAT - Can run in 1:1 and 1:n scenarios - There a...

CVE-2024-8070

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary...

Security Bulletin: TSSC/IMC is vulnerable to a Prefix truncation attack on Binary Packet Protocol

Summary TSSC/IMC is vulnerable to a Prefix truncation attack on Binary Packet Protocold. A patch has been provided that updates the systemd library. CVE-2023-48795, CVE-2023-51385 Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions,...

Security Bulletin: TSSC/IMC is vulnerable to a Prefix truncation attack on Binary Packet Protocol

Summary TSSC/IMC is vulnerable to a Prefix truncation attack on Binary Packet Protocold. A patch has been provided that updates the libssh library. CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH...

[SECURITY] Fedora 41 Update: fastd-23-1.fc41

fastd is a secure tunneling daemon with some unique features: - Very small binary about 100KB on OpenWRT in the default configuration, including all dependencies besides libc - Exchangable crypto methods - Transport over UDP for simple usage behind NAT - Can run in 1:1 and 1:n scenarios - There a...

OpenLink Software Virtuoso Installed (Windows)

Binary data openlinkvirtuosowininstalled.nbin...

Assembly AI API Detection

Binary data 701501.prm...

MAL-2025-1070 Malicious code in cache-wranglerjs-binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0178e5afcebf0b4e6e060f9908128a075320708d9500e7925bd8c379269a3919 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cache-dependency-binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 719cb7b517dc44e5112a9f6aa3c73a8d8793719f5e0e544c9977820bb2689fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenLink Software Virtuoso Detection

Binary data openlinkvirtuosowebdetect.nbin...

Amazon Workspaces Client Installed (macOS)

Binary data amazonworkspacesclientmacosinstalled.nbin...

OpenLink Software Virtuoso Installed (Linux / Unix)

Binary data openlinkvirtuosonixinstalled.nbin...

Amazon DCV Client Installed (Linux)

Binary data amazondcvclientlinuxinstalled.nbin...

PT-2025-2436 · Wazuh +1 · Wazuh +1

Name of the Vulnerable Software and Affected Versions: Wazuh versions prior to 4.9.0 Description: The issue is related to improper access control in the Wazuh agent for Windows, allowing a local malicious user to potentially exploit this vulnerability by placing a specially crafted DLL file in th...

Compliance Status

Binary data compliancestatus.nbin...