37420 matches found
WordPress Remote Code Execution via Plugin Upload (CVE-2024-31210)
WordPress is a widely used open publishing platform for the web. A security vulnerability was discovered that allows administrator-level users on single-site installations and Super Admin-level users on Multisite installations to execute arbitrary PHP code. This vulnerability affects WordPress...
How to track and stop CVE-2024-3400: Palo Alto Networks API Exploit Causing Critical Infrastructure and Enterprise Epidemics
On Friday April 12, Palo Alto disclosed that some versions of PAN-OS are not only vulnerable to remote code execution, but that the vulnerability has been actively exploited to install backdoors on Palo Alto firewalls. A patch is expected to be available on April 14th. The advisory from Palo Alto...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
This repo contains a script to set up the safe environment for e...
De-risk the Software Supply Chain by Expanding Unparalleled Detection Coverage With Qualys VMDR and Software Composition Analysis
QIDs/CVEs When it comes to cybersecurity, speed is key in getting an edge over attackers. But when you consider that vulnerabilities weaponize 24 days faster than then they are remediated on average, cybersecurity stakeholders have a lot of catching up to do. While there are many ways defenders c...
SUSE-SU-2024:1269-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-23252: Fixed denial of service via crafted web content bsc1222010. - CVE-2024-23254: Fixed possible audio data exilftration cross-origin via malicious website bsc1222010. - CVE-2024-23263: Fixed lack of Content Security Policy...
OESA-2024-1396 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a...
Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)
Exploit Title: Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting XSS Date: 12 April 2024 Exploit Author: Erdemstar Vendor: https://wordpress.com/ Version: 1.1.1 Proof Of Concept: 1. Click Add Video part and enter the XSS payload as below into the first input of form or Reques...
Qualys Endpoint Detection & Response Validated by Top Independent Testing Labs
Qualys is proud to announce that our Endpoint Detection & Response solution has earned top certifications from two of the most respected independent anti-virus testing organizations - SE Labs and AV-Test. These prestigious validations underscore Qualys mission to deliver best-in-class malware...
Fileless Attacks Prompt Intel’s Next-Gen Security
Discover how Trend is strengthening its endpoint solutions to detect fileless attacks earlier. By leveraging Intel Threat Detection Technology, Trend enhances the scalability and resiliency of its solutions...
Wiz Acquires Gem Security to Reinvent Threat Detection in the Cloud
We’re pushing for consolidation, bolstering our Cloud Detection and Response capabilities, and delivering on the promise of security operations for the cloud era...
Denial Of Service (DoS)
libmojolicious-perl is vulnerable to Denial Of Service DoS. The vulnerability due to a flaw in format detection within the mojolicious module, allowing attackers to cause a denial of service condition...
PT-2024-4128 · Nozomi Networks · Nozomi Networks Guardian
Name of the Vulnerable Software and Affected Versions: Nozomi Networks Guardian affected versions not specified Description: A Denial of Service DoS issue is caused by improper input validation in certain fields used in the Radius parsing functionality of the IDS. This allows an unauthenticated...
Ivanti Endpoint Manager Cloud Services Appliance web interface detection
Binary data ivantiendpointmanagercsawebdetect.nbin...
CVE-2024-23078
JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compareDouble, Double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerabilit...
AZL-43576 CVE-2021-47208 affecting package perl-Mojolicious 8.57-3
The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service...
DEBIAN-CVE-2021-47208
The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service...
AZL-45273 CVE-2021-47208 affecting package perl-Mojolicious 8.57-3
The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service...
UBUNTU-CVE-2021-47208
The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service...
