CVE-2024-36474

Summary: CVE-2024-36474 affects the GNOME libgsf library (G Structured File Library), specifically the Compound Document Binary File format parser in version 1.14.52. A crafted file can trigger an integer overflow while processing the directory, allowing an out-of-bounds access and potentially ar...

GNOME Project G Structured File Library (libgsf) Compound Document Binary File Sector Allocation Table integer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2069 GNOME Project G Structured File Library libgsf Compound Document Binary File Sector Allocation Table integer overflow vulnerability October 3, 2024 CVE Number CVE-2024-42415 SUMMARY An integer overflow vulnerability exists in the Compound Document Binary...

Infoblox NIOS Installed

Binary data infobloxniosdetect.nbin...

NVIDIA Container Toolkit Installed (Linux)

Binary data nvidiacontainertoolkitnixinstalled.nbin...

Infoblox NIOS Web Interface Detection

Binary data infobloxnioswebinterfacedetect.nbin...

Couchbase Server Installed (Linux / Unix)

Binary data couchbaseservernixinstalled.nbin...

Infoblox Device Detection

Binary data infobloxdevicedetect.nbin...

Couchbase Server Installed (Windows)

Binary data couchbaseserverwininstalled.nbin...

The vulnerability of the MongoDB database management system, due to issues with process management, allows attackers to load arbitrary libraries and gain full control over the application.

The vulnerability of the MongoDB database management system exists due to a problem with process management. Exploiting this vulnerability allows an attacker to load arbitrary libraries and gain full control over the application by executing a specially created binary file...

CVE-2024-41585

DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject arbitrary commands into the host machine...

Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

Cybersecurity researchers are warning about active exploitation attempts targeting a newly disclosed security flaw in Synacor's Zimbra Collaboration. Enterprise security firm Proofpoint said it began observing the activity starting September 28, 2024. The attacks seek to exploit CVE-2024-45519, a...

Extreme Networks Fabric Engine OS Detect

Binary data extremenetworksfabricengine.nbin...

Extreme Networks Fabric Engine OS Web Detection

Binary data extremenetworksfabricenginewebdetect.nbin...

PT-2024-7428 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3910 devices through 4.3.2.6 Description: The issue is an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject arbitrary commands into the host...

JetBrains YouTrack Installed (Linux / Unix)

Binary data jetbrainsyoutracknixinstalled.nbin...

Adobe Commerce / Magento Installed (Linux)

Binary data adobecommercenixinstalled.nbin...

iTerm2 Installed (macOS)

Binary data iterm2macosinstalled.nbin...

CVE-2024-6983 Remote Code Execution in mudler/localai

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the...

CVE-2024-6983

CVE-2024-6983 affects mudler/localai v2.17.1. The backend accepts inputs beyond the configuration file, enabling an attacker to upload a binary and execute code, potentially gaining full system control. Public reports in connected sources confirm this RCE vector and cite the vulnerable version as...

CVE-2024-6983 Remote Code Execution in mudler/localai

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the...