PT-2025-7807 · Unknown · Benner Modernanet

Name of the Vulnerable Software and Affected Versions: Benner ModernaNet versions prior to 1.2.1 Description: A problematic issue has been found, affecting an unknown function of the file /DadosPessoais/SG Gravar. The manipulation of the idItAg argument leads to cross-site request forgery. This...

WordPress Visualizer plugin <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Import Data From File vulnerability discovered by Webbernaut in WordPress Plugin Visualizer versions = 3.11.8...

CyberPanel Installed (Linux)

Binary data cyberpanelnixinstalled.nbin...

The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom; the software for modeling and analyzing 3D models in Autodesk Navisworks Simulate; and the software for analyzing, coordinating, and verifying 3D models and project data in Autodesk Navisworks Manage. This allows a malicious individual to cause service interruptions or execute arbitrary code.

The vulnerability of the DWFX software for viewing 3D models and project documents, as well as the software for modeling and analysis of 3D models Autodesk Navisworks Freedom, the software for analyzing, coordinating, and verifying 3D models and project data Autodesk Navisworks Manage, is related...

The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom; the software for modeling and analyzing 3D models in Autodesk Navisworks Simulate; and the software for analyzing, coordinating, and verifying 3D models and project data in Autodesk Navisworks Manage. This allows a malicious individual to cause service interruptions or execute arbitrary code.

The vulnerability of the DWFX software for viewing 3D models and project documents, as well as the software for modeling and analysis of 3D models Autodesk Navisworks Freedom, the software for analyzing, coordinating, and verifying 3D models and project data Autodesk Navisworks Manage, is related...

The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom; the software for modeling and analyzing 3D models in Autodesk Navisworks Simulate; and the software for analyzing, coordinating, and verifying 3D models and project data in Autodesk Navisworks Manage, allows a malicious individual to execute arbitrary code.

The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom, as well as the software for modeling, analyzing, and simulating 3D models in Autodesk Navisworks Simulate, and the software for analyzing, coordinating, and verifying 3D...

Apache Arrow R package: Arbitrary code execution when loading a malicious data file

...

Devolutions Server Installed (Windows)

Binary data devolutionsserverwininstalled.nbin...

CVE-2024-11158

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

CVE-2024-12130

An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

Photon OS 5.0: Vim PHSA-2024-5.0-0383

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0383. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20910...

Neptune AI SDK Detection

A Neptune AI Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208132; scriptversion"1.7";...

H2OGPT Detection

A H2OGPT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208135; scriptversion"1.6";...

NuGet Package 'Microsoft.Extensions.ML' Detection

The remote host has a 'Microsoft.Extensions.ML' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Progress WhatsUp Gold < 24.0.1 Multiple Vulnerabilities (000266151)

The version of Progress WhatsUp Gold installed on the remote host is prior to 24.0.1. It is, therefore, affected by multiple unspecified vulnerabilities as referenced in the 000266151 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

The vulnerability of the H5AC_unpin_entry component in the HDF5 library allows a perpetrator to influence the confidentiality, integrity, and accessibility of information.

The vulnerability of the H5ACunpinentry component in the HDF5 library is related to the dereferencing of NULL pointers. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of information...

PT-2024-29371

Name of the Vulnerable Software and Affected Versions phpipam version 1.6 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs through the appadminimport-exportimport-load-data.php file. This allows for potential malicious script execution. Recommendations For phpipam...

OpenAI ChatGPT App Installed (macOS)

Binary data chatgptappmacosinstalled.nbin...

PT-2024-38392 · Delta Electronics · Delta Electronics Diascreen

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen affected versions not specified Description: A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. Recommendations: At...