PT-2024-34141 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 November Security Update Ivanti Endpoint Manager versions prior to 2022 SU6 November Security Update Description: The issue allows a remote authenticated attacker with admin privileges to achieve...

CVE-2024-10284

creationtimestamp| type| source ---|---|--- 2024-11-09 02:39:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113450679715253097 2024-11-09 04:55:28+00:00| seen| https://t.me/cvedetector/10264 2025-01-29 19:18:37+00:00| published-proof-of-concept|...

CVE-2024-50496

creationtimestamp| type| source ---|---|--- 2024-10-28 20:59:27+00:00| seen| None 2024-10-28 22:51:43+00:00| seen| https://t.me/cvedetector/9183 2026-04-01 17:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mih64bqyq52w 2026-04-01 17:30:32+00:00| seen|...

UBUNTU-CVE-2022-48980

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: avoid out of bounds access in sja1105initl2policing The SJA1105 family has 45 L2 policing table entries SJA1105MAXL2POLICINGCOUNT and SJA1110 has 110 SJA1110MAXL2POLICINGCOUNT. Keeping the table structure but...

MAL-2024-9411 Malicious code in gerhtregefdsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757aeb95f7403878b8830eb0255be7e2247dc80b446387efa2932304ec69fcfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

MAL-2024-9081 Malicious code in @test3.svt/first-npm-package-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1c2ce1077d3778b7ed51e8d98f9ba6a9cd57e2be0c134fe9bda021d3a10248b The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test' @ 1.0.1 npm as malicious. It is considered malicious because...

Sequelize Configuration File Detected

Sequelize is a promise-based Node.js ORM tool for databases engines. Sequelize CLI uses by default a configuration file in 'config' directory to store the environment and database information. By accessing it, an attacker could leverage the vulnerability to gain unauthorized and privileged access...

AZL-49099 CVE-2024-8096 affecting package cmake for versions less than 3.21.4-18

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

WebSocket Detected

This is an informational plugin to inform the user that the scanner has detected the usage of WebSockets on the target web application. No source data...

CVE-2024-40119

creationtimestamp| type| source ---|---|--- 2024-07-17 03:07:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8001 2024-07-17 23:14:37+00:00| seen| https://t.me/cvedetector/1122...

Malicious code in mizuki7777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04ae6dbd7f00101a0b9da5ba1a1d40c1592a308f30ba77ecbcf27df919514664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-QGPF-JH6P-2XFR

Bulletin has no description...

ChatGPT Plugin Manifest Detected

This is an informational plugin to inform the user that the scanner has detected the presence of a manifest used by ChatGPT plugins on the target application. This detection is included in the AI and LLM category. No source data...

Ray Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Ray instance on the target application. Ray is an open-source framework to build and scale Machine Learning ML and Python applications. This detection is included in the AI and LLM category. No...

WordPress Emergency Password Reset Script Detected

WordPress has a PHP script named emergency.php which is designed to help sites administrators reset their passwords as a last resort. When exposed with the web application, this file can allow a remote and unauthenticated attacker to perform a password reset of the administrator account. No sourc...

Chatgpt.js Detected

This is an informational plugin to inform the user that the scanner has detected the usage of the ChatGPT.JS client-side library on the target application. This detection is included in the AI and LLM category. No source data...

Malicious code in logs-viewer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6542 Malicious code in aker-cas-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Flowise Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Flowise instance on the target application. Flowise is a builder for LLM applications. This detection is included in the AI and LLM category. No source data...