Lucene search
+L

1538 matches found

Securelist
Securelist
added 2024/04/30 9:00 a.m.24 views

Managed Detection and Response in 2023

Managed Detection and Response in 2023 PDF Alongside other security solutions, we provide Kaspersky Managed Detection and Response MDR to organizations worldwide, delivering expert monitoring and incident response 24/7. The task involves collecting telemetry for analysis by both machine-learning ...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/04/25 12:03 a.m.24 views

Security Bulletin: IBM Administration Runtime Expert for i is vulnerable to attacker executing arbitrary code on the system due to Dojo (CVE-2021-23450)

Summary IBM Administration Runtime Expert for i uses Dojo to render it's web interface. Dojo 1.3.3 could allow an attacker to execute arbitrary code on the system, as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as describ...

9.8CVSS9AI score0.30367EPSS
SaveExploits1Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:00 a.m.17 views

The vulnerability of the programming tools for programmable logic controllers (PLCs), EcoStruxure Control Expert and EcoStruxure Process Expert, arises from insufficient protection of registration data. This allows a malicious individual to gain unauthorized access to the project file.

The vulnerability of the programming tools for programmable logic controllers PLCs, EcoStruxure Control Expert and EcoStruxure Process Expert, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the project...

7.1CVSS7AI score0.0015EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:00 a.m.14 views

The vulnerability of the programming tools for PLCs (programmable logic controllers), namely EcoStruxure Control Expert and EcoStruxure Process Expert, arises from the use of strictly encrypted audit data. This vulnerability allows a malicious individual to gain unauthorized access to the project file.

The vulnerability of the programming interfaces for PLCs programmable logic controllers, namely EcoStruxure Control Expert and EcoStruxure Process Expert, lies in the use of strictly encrypted configuration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to...

7.7CVSS7.2AI score0.00232EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2024/04/15 2:02 p.m.33 views

Software Support: 7 Essential Reasons You Can’t Overlook

By Owais Sultan Explore the significance of software support in the fast-paced digital world. Discover how continuous maintenance, bug fixing, feature enhancement, and integration management optimize operations. With expert assistance, enhance security, ensure project continuity, and improve...

7.3AI score
SaveExploits0
Qualys Blog
Qualys Blog
added 2024/04/10 6:32 p.m.16 views

How to Reduce Your Risk with Proactive VM Strategies

Current cybersecurity challenges demand more than just reactive measures. A significant hurdle many organizations face is the effective remediation of vulnerabilities within their IT infrastructure. Recognizing this, security teams are increasingly turning to sophisticated vulnerability managemen...

7.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/04/09 9:47 a.m.11 views

nettoyage-expert.fr Cross Site Scripting vulnerability OBB-3911752

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2024/04/08 11:30 a.m.42 views

AI Scam Calls: How to Protect Yourself, How to Detect

AI tools are getting better at cloning people’s voices, and scammers are using these new capabilities to commit fraud. Avoid getting swindled by following these expert tips...

7.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/04/08 9:08 a.m.17 views

seoexpertgoldcoast.com.au Cross Site Scripting vulnerability OBB-3908466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2024/04/03 5:15 p.m.6 views

CVE-2024-27674

Macro Expert through 4.9.4 allows BUILTIN\Users:OICIM access to the "%PROGRAMFILESX86%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary...

7.8CVSS5.8AI score0.0031EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 5:15 p.m.12 views

CVE-2024-27674

Macro Expert through 4.9.4 allows BUILTIN\Users:OICIM access to the "%PROGRAMFILESX86%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary...

7.8CVSS6.8AI score0.0031EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/03 12:00 a.m.9 views

CVE-2024-27674

Macro Expert through 4.9.4 allows BUILTIN\Users:OICIM access to the "%PROGRAMFILESX86%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary...

7.1AI score0.0031EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.6 views

Macro Expert 安全漏洞

Macro Expert is a robotic process automation software from Macro Expert. A security vulnerability exists in Macro Expert 4.9.4 and prior versions that originates from allowing access to the GrassSoftMacro Expert folder, where an unprivileged user can upgrade MacroService to the SYSTEM .exe binary...

7.8CVSS6.6AI score0.0031EPSS
SaveExploits0References3
CVE
CVE
added 2024/04/03 12:00 a.m.77 views

CVE-2024-27674

CVE-2024-27674 affects Macro Expert (

7.8CVSS7AI score0.0031EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/04/03 12:00 a.m.29 views

CVE-2024-27674

Macro Expert through 4.9.4 allows BUILTIN\Users:OICIM access to the "%PROGRAMFILESX86%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary...

7AI score0.0031EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.9 views

PT-2024-21987

Name of the Vulnerable Software and Affected Versions Macro Expert versions 4.9.4 and earlier Description The issue allows an unprivileged user to escalate to SYSTEM by replacing the MacroService.exe binary due to improper access control. The "%PROGRAMFILESX86%GrassSoftMacro Expert" folder has...

7.8CVSS5.9AI score0.0031EPSS
SaveExploits0References5
NVD
NVD
added 2024/03/21 2:52 a.m.19 views

CVE-2024-27291

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch...

6.1CVSS6.2AI score0.00411EPSS
SaveExploits0References2
HackRead
HackRead
added 2024/03/06 9:48 p.m.21 views

A Comprehensive Guide To Prototyping PCB Assembly

By Owais Sultan Explore the world of Prototyping PCB Assembly with our comprehensive guide. Learn, create, and innovate with expert insights. Start your PCB journey today! This is a post from HackRead.com Read the original post: A Comprehensive Guide To Prototyping PCB Assembly...

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2024/02/29 9:56 p.m.48 views

CVE-2024-27292 Docassemble unauthorized access through URL manipulation

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

7.5CVSS7.8AI score0.69486EPSS
SaveExploits2References2
CVE
CVE
added 2024/02/29 9:49 p.m.137 views

CVE-2024-27291

CVE-2024-27291 concerns Docassemble, an expert system for guided interviews and document assembly. The issue is an open redirect vulnerability: before version 1.4.97, a crafted URL can cause a user to be redirected to an arbitrary site due to improper URL handling. The open redirect is mitigated ...

6.1CVSS6.1AI score0.00411EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder