Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

WordPress Magic Conversation For Gravity Forms plugin <= 3.0.96 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Magic Conversation For Gravity Forms versions = 3.0.96...

CVE-2024-5755

In lunary-ai/lunary versions =v1.2.11, an attacker can bypass email validation by using a dot character '.' in the email address. This allows the creation of multiple accounts with essentially the same email address e.g., '[email protected]' and '[email protected]', leading to incorrect...

CVE-2024-5755 Email Validation Bypass in lunary-ai/lunary

In lunary-ai/lunary versions =v1.2.11, an attacker can bypass email validation by using a dot character '.' in the email address. This allows the creation of multiple accounts with essentially the same email address e.g., '[email protected]' and '[email protected]', leading to incorrect...

PT-2024-37122 · Lunary Ai · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions =v1.2.11 Description: The issue allows an attacker to bypass email validation by using a dot character '.' in the email address, enabling the creation of multiple accounts with essentially the same email address. Thi...

CVE-2024-5755: Incorrect Synchronization

In lunary-ai/lunary versions =v1.2.11, an attacker can bypass email validation by using a dot character '.' in the email address. This allows the creation of multiple accounts with essentially the same email address e.g., '[email protected]' and '[email protected]', leading to incorrect...

PT-2024-28287

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.15 Description A Heap Buffer Overflow issue allows attackers to crash the application by sending a crafted payload to the display444as420 function at sdl.cc. Recommendations For Libde265 version 1.0.15, consider updating t...

MAL-2024-6870 Malicious code in dot-rake_tasks_in_rails (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dot-rake_tasks_in_rails (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in OCI.DotNetSDK.Waf.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in OCI.DotNetSDK.Usage.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in OCI.DotNetSDK.Osuborganizationsubscription.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in y-dot (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3974 Malicious code in y-dot (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in auth0.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299295a8f62b96e6336a60ce85d2212185bf0cf424cc548d8bca9f0b14ed85c1 On npm install, package.json's preinstall and preupdate/test hook runs nslookup bkxajsfkvlurhaoeotqbqf3fg2sitbxll.oast.fun. The destination oast.fun ...

Axiros AXESS ACS Security Breach

Axiros AXESS ACS is an industry flagship software application from Axiros, Inc. Designed to address automated service provisioning, service monitoring and service assurance. A security vulnerability exists in Axiros AXESS ACS versions 4.x prior to 4.3.2 and 5.0.0 that stems from an authorization...

PT-2024-10551 · Unknown · Tftp Server +1

Name of the Vulnerable Software and Affected Versions: Distinct Intranet Servers versions 3.10 and earlier Description: The issue allows remote attackers to read or write arbitrary files via a .. dot dot in the 1 get or 2 put commands. This is due to multiple directory traversal vulnerabilities i...

Northern.tech Mender security breach

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. for connected devices of any size. A security vulnerability exists in Northern.tech Mender that stems from the presence of faulty access control, resulting in an attacker privilege that can be escalated...

ROS-20240611-12

Vulnerability of the named DNS server daemon BIND is related to an operation overrunning the buffer boundaries in memory as a result of recursion during processing of received packets. as a result of uncontrolled recursion when processing received packets. Exploitation of the vulnerability could...

CVE-2024-5773

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to launch the...