5005 matches found
Exploit for Path Traversal in Fastadmin
CVE-2024-7928: FastAdmin Installation bash g...
Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data
Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft's Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 CVSS score: 8.5, the vulnerability has been described as an information disclosure bug stemming from a...
x86/bhi: Avoid warning in #DB handler due to BHI mitigation
...
Security Updates for Microsoft SQL Server OLE DB Driver (July 2024)
The Microsoft SQL Server OLE DB Driver installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker could exploit the vulnerability by tricking an authenticated user UI:R into attempting to connect to a malicious SQL...
CVE-2024-42240
In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...
CVE-2024-42240
In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...
CVE-2024-42240 x86/bhi: Avoid warning in #DB handler due to BHI mitigation
In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...
CVE-2024-42240
CVE-2024-42240: Linux kernel x86/bhi vulnerability where, when BHI mitigation is enabled, an entry_SYSENTER_compat() sequence could trigger a #DB handler warning due to the TF single-step bit handling. The fix changes the order to clear the TF flag before or after clearing branch history as appro...
CVE-2024-42240 x86/bhi: Avoid warning in #DB handler due to BHI mitigation
In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...
Exploit for Path Traversal in Stitionai Devika
CVE-2024-40422 Found this on exploit-db, decided to make my ow...
GHSA-W9PG-7C3H-FC8J ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF
Impact Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF Affected products: Icinga Web =2.12.0 Icinga DB Web =1.0.0 Icinga Notifications Web =0.1.0 Icinga Web JIRA Integration =1.3.0 All affected products, in any version, wil...
CVE-2024-6281 Path Traversal in parisneo/lollms
A path traversal vulnerability exists in the applysettings function of parisneo/lollms versions prior to 9.5.1. The sanitizepath function does not adequately secure the discussiondbname parameter, allowing attackers to manipulate the path and potentially write to important system folders...
CVE-2024-39553
CVE-2024-39553 affects Juniper Networks Junos OS Evolved sampling service (inline jflow). A Resource Exposure to Wrong Sphere vulnerability allows an unauthenticated, network-based attacker to send arbitrary data to the device, causing the msvcsd process to crash and yielding limited DoS while no...
CVE-2024-38088
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...
CVE-2024-38087
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...
CVE-2024-38087
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...
CVE-2024-37336
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...
CVE-2024-37336
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...