Design/Logic Flaw

This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 all versions. Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning tool that can be used with or without an agent with Jira Service Management Cloud, Data Center or...

CVE-2024-21682

This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 all versions. Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning tool that can be used with or without an agent with Jira Service Management Cloud, Data Center or...

CVE-2024-21682

This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 all versions. Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning tool that can be used with or without an agent with Jira Service Management Cloud, Data Center or...

CVE-2024-21682

CVE-2024-21682 affects Atlassian Jira Service Management Assets Discovery (formerly Insight Discovery) versions 1.0 through 6.2.0. The vulnerability is an authenticated injection that lets an attacker modify the actions of a system call, with high impact on confidentiality, integrity, and availab...

CVE-2024-22054

A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Points UniFi Switches UniFi LTE Backup UniFi Express Only Mesh Mode, Router mode is not affected...

CVE-2024-22054

The CVE-2024-22054 issue affects UniFi devices where a malformed discovery packet sent by an attacker with network access can disrupt device management and discovery. Affected products include UniFi Access Points, UniFi Switches, UniFi LTE Backup, and UniFi Express (Mesh Mode only). The root caus...

darwin.edu.ar Cross Site Scripting vulnerability OBB-3855297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Atlassian Assets Discovery Security Vulnerability

Atlassian Assets Discovery is an agentless network scanner from Atlassian Australia. A security vulnerability exists in Atlassian Assets Discovery versions 1.0 through 6.2.0, which stems from the presence of an injection vulnerability that could allow an authenticated attacker to modify system ca...

Kafka UI 0.7.1 Command Injection Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kafka UI Unauthenticated Remote Command Execution via the Groovy Filter option.', 'Description' = %q A command injection vulnerability exists in...

PT-2024-2154 · Atlassian · Jira Service Management Server +1

Name of the Vulnerable Software and Affected Versions: Assets Discovery versions 1.0 through 6.2.0 Description: This issue allows an authenticated attacker to modify system calls, potentially impacting confidentiality, integrity, and availability. It requires no user interaction. Assets Discovery...

Ubiquiti UniFi Switches Security Vulnerability

Ubiquiti UniFi Switches is a series of switches from Ubiquiti USA. A security vulnerability exists in Ubiquiti UniFi Switches versions prior to 6.6.61, which stems from the fact that an attacker with network access privileges may be able to disrupt device management and discovery functionality by...

CVE-2024-1580

creationtimestamp| type| source ---|---|--- 2024-02-19 12:21:31+00:00| seen| https://t.me/ctinow/187611 2024-02-19 12:31:31+00:00| seen| https://t.me/ctinow/187616 2024-02-20 18:50:27+00:00| seen| https://t.me/arpsyndicate/3672 2024-03-08 10:22:18+00:00| seen| https://t.me/ctinow/203202 2024-03-1...

CVE-2024-1345 Weak MySQL database root password in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password...

reliableresearchreports.com Cross Site Scripting vulnerability OBB-3853996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: A vulnerability in Apache Commons FileUpload affects IBM Tivoli Application Dependency Discovery Manager.

Summary Vulnerabilitiy in Apache Commons FileUpload affects IBM Tivoli Application Dependency Discovery Manager CVE-2023-24998. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of...

CVE-2023-40100

In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40100

In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Memory corruption

In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40100

In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40100

In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...