Oracle Essbase Multiple Vulnerabilities (October 2024 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2024 Critical Patch Update CPU. It is, therefore, affected by: - Vulnerability in Oracle Essbase component: Essbase Web Platform curl. The supported version that is affected is 21.6. Easily...

GHSA-G9XM-7538-MQ8W Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Impact An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0 see https://github.com/Exiv2/exiv2/pull/2337, so Exiv2 versions before v0.28 are not affected. Exiv2 is a command-line utility and C++ library for reading...

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

An advanced persistent threat APT actor with suspected ties to India has sprung forth with a flurry of attacks against high-profile entities and strategic infrastructures in the Middle East and Africa. The activity has been attributed to a group tracked as SideWinder, which is also known as...

The vulnerability of the C-MOR video surveillance software’s web interface allows a intruder to elevate their privileges and execute arbitrary commands on the operating system.

The vulnerability of the C-MOR video surveillance software’s web interface exists due to the failure to take measures to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary...

usb: typec: ucsi: Fix null pointer dereference in trace

...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772: Incorrect Authorization

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

PT-2024-33208

Name of the Vulnerable Software and Affected Versions C-CHIP version 1.2.8 Description The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations For version 1.2.8, at the moment, there is no information about a newer version that contains ...

CVE-2024-48772

The smart home product solution C-CHIP (com.cchip.cchipamaota) version v.1.2.8 is vulnerable to an incorrect authorization issue. This flaw allows a remote attacker to obtain sensitive information through the device's firmware update process. While the severity is rated as CRITICAL (CVSS 9.1) wit...

PT-2024-10030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free vulnerability in the ma35 pinctrl dt node to map func function within the drivers/pinctrl/nuvoton/pinctrl-ma35.c module of the Linux kernel. This...

C-CHIP 安全漏洞

C-CHIP is a smart home product solution from China Cixin Micro C-CHIP. A security vulnerability exists in C-CHIP version v.1.2.8, which stems from an issue that allows remote attackers to obtain sensitive information through the firmware update process...

Malware in updated-script-retail-tycoon-2-script-h-a-c-k-9u9pw3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in updated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in new-code-script-gt-a-samp-h-a-c-k-down-lo-ad-lkk02y

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in get-new-script-king-of-fighters-xv-h-a-c-k-trainer-c-h-e-a-t-anqens

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in get-new-script-elden-ring-trainer-c-h-e-a-ts-h-a-c-ks-k1ciug

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in new-script-tabg-c-h-e-a-t-f-r-e-e-h-a-c-k-iqaij3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...