PT-2024-6867 · D Link · D-Link Wireless Routers

Name of the Vulnerable Software and Affected Versions: D-Link wireless routers affected versions not specified Description: The issue is related to the telnet service in certain D-Link wireless routers, where user input is not properly validated, allowing unauthenticated remote attackers to use...

Lenovo ThinkPad security vulnerabilities

Lenovo ThinkPad is a portable computer from Lenovo China. A security vulnerability exists in Lenovo ThinkPad that stems from a vulnerability that could allow a local attacker to elevate privileges by accessing the embedded UEFI shell...

Lenovo XClarity Controller security vulnerabilities

Lenovo XClarity Controller Lenovo XCC is a server embedded management engine from Lenovo China. It is primarily used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller, which stems from a specially constructed file upload that...

PT-2024-38564 · Lenovo · Thinkpad L390 Yoga +1

Name of the Vulnerable Software and Affected Versions: ThinkPad L390 Yoga and 10w Notebook affected versions not specified Description: A potential issue was reported that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell. This could potentially be used to...

CVE-2024-3305

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android...

CVE-2024-3305

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android...

CVE-2024-3305

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android...

[SECURITY] Fedora 40 Update: wolfssl-5.7.2-2.fc40

The wolfSSL embedded SSL library formerly CyaSSL is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standard operating environments as well...

CVE-2024-3305: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android...

PT-2024-6591

Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified Description: A privilege escalation issue exists due to improper default file permissions, allowing users to exfiltrate credentials and escalate privileges. This can be exploited by...

media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access

...

[SECURITY] Fedora 40 Update: libell-0.69-1.fc40

The Embedded Linux Library ELL provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl for dynamic linking. While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, ...

September 10, 2024—KB5043129 (Monthly Rollup)

September 10, 2024—KB5043129 Monthly Rollup Applies To Windows Server 2008 R2 Premium Assurance End of support information Note As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported...

September 10, 2024—KB5043092 (Security-only update)

September 10, 2024—KB5043092 Security-only update Applies To Windows Server 2008 R2 Premium Assurance End of support information Note As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a...

WordPress Plugin "Forminator" vulnerable to cross-site scripting

Overview WordPress Plugin "Forminator" provided by WPMU DEV assists building web forms. When accessing the page including the web form created with Forminator, some information from the URL may be embedded to the web form. This feature processes the embedded information improperly, leading to...

CVE-2024-1744

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Computer Accord ORS allows Retrieve Embedded Sensitive Data. This issue affects Accord ORS: before 7.3.2.1...

CVE-2024-1744

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Computer Accord ORS allows Retrieve Embedded Sensitive Data.This issue affects Accord ORS: before 7.3.2.1...

CVE-2024-1744: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Computer Accord ORS allows Retrieve Embedded Sensitive Data. This issue affects Accord ORS: before 7.3.2.1...

Accord ORS information leakage vulnerability

Accord ORS is Accord's software that provides transit seat reservations, business management, and decision support for intercity passenger transportation companies. An information disclosure vulnerability exists in Accord ORS versions prior to 7.3.2.1 that originates from exposing sensitive...

MAL-2024-11581 Malicious code in embeds (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ae6a18503196c40e7fd1759d8a68025e6a980a64821c2a1232b7f76fbc2779 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...