[SECURITY] Fedora 40 Update: opensc-0.25.0-1.fc40

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

CVE-2024-24272

The iTop DualSafe Password Manager & Digital Vault software (versions prior to 1.4.24 ) contains a vulnerability where sensitive credentials are leaked as plaintext in a log file. A local attacker can access this log file to obtain the sensitive information without requiring knowledge of the mast...

CVE-2024-24272: Insertion of Sensitive Information into Log File

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

The ‘AT&T breach’—what you need to know

Earlier this week, the data of over 70 million people was posted for sale on an online cybercrime forum. The person selling the data claims it stems from a 2021 breach at AT&T. Back in 2021, a hacker named Shiny Hunters claimed to have breached AT&T and put the alleged stolen data up for sale for...

CVE-2024-22083

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks...

CVE-2024-22085

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable...

CVE-2024-22083

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks...

CVE-2024-22085

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable...

CVE-2024-22082

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory listing can occur: the web interface cay be abused be an attacker get a better understanding of the operating system...

digitalcollections.vicu.utoronto.ca Cross Site Scripting vulnerability OBB-3880569

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 digital fault recorder version 1.1.4.15 and earlier, which stems from weak file system...

CVE-2024-22083

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before ) is vulnerable to a security issue involving a hardcoded backdoor session ID . This flaw allows unauthorized access to the device, including the ability to perform reconfiguration tasks . To mitigate risk, it is recommended to di...

CVE-2024-22077

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before ) is vulnerable to an issue caused by weak permissions on the SQLite database file . This misconfiguration could allow unauthorized access or manipulation of the database. As of the current documentation, there is no information r...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 digital fault recorder version 1.1.4.15 and prior versions, which can be exploited for...

CVE-2024-22078

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before ) is vulnerable to privilege escalation due to weak filesystem permissions on the network configuration script . The script is world writable , allowing all authenticated users to obtain write access and subsequently escalate from...

CVE-2024-22077

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The SQLite database file has weak permissions...

CVE-2024-22081

The Elspec G5 digital fault recorder is vulnerable to unauthenticated memory corruption in the HTTP header parsing mechanism in versions 1.1.4.15 and before . This flaw can be triggered by a remote attacker without authentication. As a temporary workaround, users are advised to restrict access to...

CVE-2024-22080

The Elspec G5 digital fault recorder (versions 1.1.4.15 and before ) is susceptible to an unauthenticated memory corruption vulnerability during XML body parsing . This issue is categorized as an Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119). The vulnerability ...