13032 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not validating the payload size in ipc responses...
PT-2024-14006 · Gog · Gog Galaxy
Name of the Vulnerable Software and Affected Versions: GOG Galaxy Beta versions 2.0.67.2 through 2.0.71.2 Description: A Privilege Escalation issue in the inter-process communication procedure allows authenticated users to change the DACL of arbitrary system directories to include Everyone full...
CVE-2024-3209
A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function getne64 of the file bele.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this...
CVE-2024-3209 UPX bele.h get_ne64 heap-based overflow
A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function getne64 of the file bele.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this...
MAL-2024-1167 Malicious code in xo-page-test-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11d1c570ca1f162deccd278919172fec0695d65f640b2365daebdc2dfa0d998d The OpenSSF Package Analysis project identified 'xo-page-test-components' @ 99.2.9 npm as malicious. It is considered malicious because: - The...
CVE-2024-20850
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay...
CVE-2024-20850
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay...
CVE-2024-20850
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay...
CVE-2024-20850
The CVE-2024-20850 entry concerns Samsung Pay on Samsung devices, where an implicit Intent for sensitive communication is used. This design flaw allows local attackers to access Samsung Pay information. Affected versions are prior to 5.4.99. The vulnerability’s impact is confined to confidentiali...
Malicious code in paysafe-gpf-as-communication-lib-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997f87146bcd457b4e2cb94ddbcfbb3730c96dd9a2b5843fcabcbb9456cf899d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1163 Malicious code in paysafe-gpf-as-communication-lib-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997f87146bcd457b4e2cb94ddbcfbb3730c96dd9a2b5843fcabcbb9456cf899d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hds-input (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 331eeefc86867a890820a88481ba976967f613a659320676e1fffee29aa58933 The OpenSSF Package Analysis project identified 'hds-input' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Vultur Android Banking Trojan Returns with Upgraded Remote Control Capabilities
The Android banking trojan known as Vultur has resurfaced with a suite of new features and improved anti-analysis and detection evasion techniques, enabling its operators to remotely interact with a mobile device and harvest sensitive data. "Vultur has also started masquerading more of its...
MAL-2024-1182 Malicious code in soundcloud-songs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1a7a5bdeca432ac351a71a0caac1e58d2f4d31d54fcf357f657e84d8f201f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
TeamCity Agent XML-RPC Command Execution Exploit
This Metasploit module allows remote code execution on TeamCity Agents configured to use bidirectional communication via xml-rpc. In bidirectional mode the TeamCity server pushes build commands to the Build Agents over port TCP/9090 without requiring authentication. Up until version 10 this was t...
MAL-2024-1172 Malicious code in fe-bitmovin-player (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...
[SECURITY] Fedora 38 Update: podman-tui-1.0.0-1.fc38
podman-tui is a terminal user interface for Podman v4. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...
MAL-2024-1184 Malicious code in wm-search-deployables (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75117d2388716c2ebc07fc5320bc6b6d5130dc106da865682566ea803272aa8d The OpenSSF Package Analysis project identified 'wm-search-deployables' @ 99.3.0 npm as malicious. It is considered malicious because: - The...
CVE-2024-3039
A vulnerability classified as critical has been found in Shanghai Brad Technology BladeX 3.4.0. Affected is an unknown function of the file /api/blade-user/export-user of the component API. The manipulation with the input updatexml1,concat0x3f,md5123456,0x3f,1=1 leads to sql injection. It is...
CVE-2024-2991
CVE-2024-2991 affects Tenda FH1203 (version 2.0.1.6). The vulnerability is in the function formWriteFacMac of the file /goform/WriteFacMac; manipulating the mac argument leads to command injection. The issue is exploitable remotely and public exploits have been disclosed. Multiple sources corrobo...