PT-2024-31789

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.29.9 Envoy versions prior to 1.30.6 Envoy versions prior to 1.31.2 Description: The issue arises when the Jwt filter in Envoy leads to a crash when the route cache is cleared with remote JWKs, under specific...

kernel: cpufreq: exit() callback is optional

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present...

CVE-2024-44685

Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI...

CVE-2024-44685

South River Titan SFTP and Titan MFT Server (version 2.0.25.2426 and earlier) are vulnerable to an information disclosure flaw. When configuring SMTP settings via the Web UI , the application returns a JSON response that exposes sensitive information, including passwords , in clear text . Exploit...

CVE-2024-44685

Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI...

scsi: ufs: core: Fix ufshcd_clear_cmd racing issue

...

PT-2024-34076

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A vulnerability in the Linux kernel has been resolved by adding an additional check in the ni clear function. This check prevents access to an uninitialized bitmap during the replay process b...

Texas Instruments Fusion Digital Power Designer security vulnerability

Texas Instruments Fusion Digital Power Designer is a digital power design tool from Texas Instruments. A security vulnerability exists in Texas Instruments Fusion Digital Power Designer version 7.10.1, which originated from a vulnerability that allows a local attacker to gain access to sensitive...

D-Link DIR-823G security vulnerabilities

D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B0520181207 version, which stems from an information disclosure vulnerability that allows unauthorized configuration file downloads, where the downloaded configuration fi...

CVE-2024-45175

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It was found out that sensitive information, for example login credentials of cameras, is stored in cleartext. Thus, an attacker with filesystem access, for example exploiting a...

ROS-20240902-20

A vulnerability in the KeePass password manager is related to unencrypted storage of critical information. Exploitation of the vulnerability could allow an attacker to obtain passwords in clear form...

Novell ZENworks Asset Management 7.5 Configuration Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Novell ZENworks Asset Management 7.5 Configuration Access', 'Description' = %q This module exploits a hardcoded user and password for the GetConf...

Cambium CnPilot R200/r201 Login Scanner And Config Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cambium cnPilot r200/r201 Login Scanner and Config Dump', 'Description' = % This module scans for Cambium cnPilot r200/r201 management login...

Supermicro Onboard IPMI Port 49152 Sensitive File Exposure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Supermicro Onboard IPMI Port 49152 Sensitive File Exposure', 'Description' = %q This module abuses a file exposure vulnerability...

WindLDR and WindO/I-NV4 security vulnerabilities

IDEC WindLDR and WindO/I-NV4 are both products of IDEC Corporation of Japan.WindLDR is a PLC programming software.WindO/I-NV4 is operator interface touch screen programming software. A security vulnerability exists in WindLDR V9.1.0 and earlier versions and WindO/I-NV4 V3.0.1 and earlier versions...

PT-2024-33777

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The Linux kernel has a resolved vulnerability where the kernel occasionally crashes in cpumask clear cpu, which is called within exit round robin, due to a misalignment in memory address...

Linux kernel gadget Heap Buffer Overflow DoS

The vulnerability of the ffsdataclear function in the Linux kernel’s gadget component is related to a possible overflow of the link counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Kliqqi CMS security vulnerability

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/adminlog.php?clear=1 does not adequately verify that the request is from a trusted user , an attacker can use this...

CVE-2024-42606

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminlog.php?clear=1...

CVE-2024-42606: Cross-Site Request Forgery (CSRF)

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminlog.php?clear=1...