CVE-2024-42678

Cross Site Scripting vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code via a crafted script to the /WebSet/DlgGridSet.html component...

CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature...

CVE-2024-42676

Huizhi enterprise resource management system v1.0 and earlier is affected by a File Upload vulnerability in the /nssys/common/Upload.aspx?Action=DNPageAjaxPostBack endpoint that allows remote code execution. The issue arises from the file upload functionality, enabling an attacker to run arbitrar...

Ubuntu: Security Advisory (USN-6961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : BusyBox vulnerabilities (USN-6961-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6961-1 advisory. It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to impersonate another user, execute arbitrary code with the victim's privileges and potentially gain access to sensitive data in the victim's context. Successful exploitation require...

CVE-2022-27486

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1...

CVE-2024-36398

A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...

CVE-2024-41908

A vulnerability has been identified in NX All versions V2406.3000. The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process...

CVE-2024-36398

A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...

CVE-2024-42737

The TOTOLINK X5000r router (version v9.1.0cu.2350_b20230313 ) is vulnerable to an OS command injection vulnerability within the delBlacklist function located in the /cgi-bin/cstecgi.cgi file. Authenticated attackers can exploit this flaw by sending malicious packets to execute arbitrary commands ...

CVE-2022-27486: Improper Neutralization of Special Elements used in an OS Command

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1...

CVE-2023-7066 Siemens Teamcenter Visualization and JT2Go Out-of-bounds Read

The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-40500

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component...

CVE-2024-32765

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...

CVE-2024-42166 Command Injection in Applicationname

The function "generateappcertificates" in lib/appcertificates.js of FIWARE Keyrock = 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by creating an application with a malicious...

TeamT5 ThreatSonar Anti-Ransomware code-related vulnerabilities

TeamT5 ThreatSonar Anti-Ransomware is a proactive and intelligent endpoint detection and response solution from TeamT5. A code issue vulnerability exists in TeamT5 ThreatSonar Anti-Ransomware version 3.4.5 and prior versions, which stems from a failure to properly validate the contents of an...

Malicious code in radioplayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6556141379c5f4a05e6d6f79e61cd58affbe8cf738f0e0db1f9797fad19c8fa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-32765

CVE-2024-32765 affects QNAP Network & Virtual Switch, with fixed releases in QTS 5.1.8.2823 build 20240712 and later and QuTS hero h5.1.8.2823 build 20240712 and later. A locally authenticated administrator can gain access to and execute certain functions via unspecified vectors; the exact exploi...

CVE-2024-41577

The productinfoquick v1.0 application is vulnerable to an arbitrary file upload flaw within the Ueditor component . Attackers can exploit this vulnerability by uploading a crafted PNG file to achieve arbitrary code execution . To remediate this, users should update the Ueditor component to preven...