CVE-2024-24939

creationtimestamp| type| source ---|---|--- 2024-02-06 11:26:56+00:00| seen| https://t.me/ctinow/179915 2024-03-01 09:41:46+00:00| seen| https://t.me/ctinow/197441...

Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-25194)

Summary There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an...

CVE-2019-8784

creationtimestamp| type| source ---|---|--- 2024-01-31 08:41:50+00:00| seen| https://t.me/ctinow/176553 2024-01-31 14:42:04+00:00| seen| https://t.me/ctinow/176784 2024-01-31 15:41:39+00:00| seen| https://t.me/ctinow/176833 2024-01-31 17:17:18+00:00| seen| https://t.me/ctinow/176902 2024-02-01...

Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

CVE-2024-1021

creationtimestamp| type| source ---|---|--- 2024-01-29 23:31:10+00:00| seen| https://t.me/ctinow/175601 2024-02-05 23:16:07+00:00| seen| https://t.me/ctinow/179575 2024-02-21 13:36:47+00:00| seen| https://t.me/ctinow/189581 2024-02-27 20:08:53+00:00| seen| https://t.me/arpsyndicate/4091 2026-06-2...

CVE-2019-8803

creationtimestamp| type| source ---|---|--- 2024-01-29 19:51:41+00:00| seen| https://t.me/ctinow/175500 2024-01-31 08:41:42+00:00| seen| https://t.me/ctinow/176546 2024-01-31 10:36:52+00:00| seen| https://t.me/ctinow/176632 2024-01-31 12:37:19+00:00| seen| https://t.me/ctinow/176701...

Maliciously crafted Git server replies can cause DoS on go-git clients

...

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

...

[SECURITY] Fedora 39 Update: freeipa-4.11.1-1.fc39

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

CVE-2024-23655

Tuta is an encrypted email service. Starting in version 3.118.12 and prior to version 3.119.10, an attacker is able to send a manipulated email so that the user can no longer use the app to get access to received emails. By sending a manipulated email, an attacker could put the app into an unusab...

CVE-2024-22211

FreeRDP is a collection of remote desktop protocol library and client software that is both free and open source. An integer overflow within freerdpbitmapplanarcontextreset results in a heap-buffer overflow. This impacts clients built on FreeRDP. However, server implementations and proxies based ...

Integer overflow

FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in freerdpbitmapplanarcontextreset leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A...

CVE-2024-22211

FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in freerdpbitmapplanarcontextreset leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A...

CVE-2024-22211

FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in freerdpbitmapplanarcontextreset leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A...

OpenJDK: logging of digital signature private keys (8316976)

Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks o...

OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123)

Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modificati...

OpenJDK: logging of digital signature private keys (8316976)

Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks o...

OpenJDK: logging of digital signature private keys (8316976)

Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks o...

OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or...

This Week in Spring - January 16th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's the 16th of January already! We're closer to February than not! I can hardly believe it. As always, we've got a lot to cover so let's dive right into it. the Spring Authorization Server 1.3.0-m1 is now available this is...