Zyxel VMG8825-T50K 缓冲区错误漏洞

The Zyxel VMG8825-T50K is an Internet access device from China Hopkins Zyxel. A buffer error vulnerability exists in Zyxel VMG8825-T50K version 5.50ABOM.8C0 and prior versions, which arises from the parameter type parser improperly restricting operations within the range of a memory buffer...

CVE-2024-34057

Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service...

PT-2024-32775

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved, which could lead to memory leaks. The issue is related to the bpf helpers that had ARG PTR TO LONG,INT as input arguments. In case of an...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden AXIS. A security vulnerability exists in AXIS OS versions 6.50 through 11.11. An attacker exploited the vulnerability to cause the device to run out of resources...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden. A security vulnerability exists in AXIS OS versions 6.50 through 11.10, which stems from the Guard Tour VAPIX API parameter that allows the use of arbitrary values...

PT-2024-32788

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to the firmware loader in the Linux kernel, where certain code paths construct firmware file names from string components passed through from devices or semi-privileged...

PT-2024-6023 · Zyxel · Zyxel Usg Flex Series +3

Name of the Vulnerable Software and Affected Versions: Zyxel ATP series versions V4.32 through V5.38 Zyxel USG FLEX series versions V4.50 through V5.38 Zyxel USG FLEX 50W series versions V4.16 through V5.38 Zyxel USG20W-VPN series versions V4.16 through V5.38 Description: The issue is related to ...

Xiaomi GetApps 安全漏洞

Xiaomi GetApps is a global app store by Chinese company Xiaomi. It is used by developers to publish and distribute their apps to over 200 million users in 59 regions. A security vulnerability exists in Xiaomi GetApps that stems from authentication logic that can be bypassed...

PT-2024-30432 · WordPress · Wpbackitup Backup/Restore

Name of the Vulnerable Software and Affected Versions: WPBackItUp Backup and Restore WordPress versions 1.50 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WPBackItUp Backup and Restore WordPress plugin. This allows an attacker to perform unintended actions on a user...

CVE-2024-5722

creationtimestamp| type| source ---|---|--- 2024-08-13 07:31:39+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/730 2024-08-13 07:31:57+00:00| published-proof-of-concept| https://t.me/HackerArsenal/160 2024-08-18 06:23:26+00:00| published-proof-of-concept|...

UBUNTU-CVE-2023-41884

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34...

WordPress WP BackItUp plugin <= 1.50 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP BackItUp versions = 1.50...

CVE-2024-21158

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Patch Tuesday - June 2024

It’s June 2024 Patch Tuesday. Microsoft is addressing 51 vulnerabilities today, and has evidence of public disclosure for just a single one of those. At time of writing, none of the vulnerabilities published today are listed on CISA KEV, although this is always subject to change. Microsoft is...

Reduced entropy due to inadequate character set usage

Description Affected versions of the nano-id crate incorrectly generated IDs using a reduced character set in the nanoid::base62 and nanoid::base58 functions. Specifically, the base62 function used a character set of 32 symbols instead of the intended 62 symbols, and the base58 function used a...

PT-2024-30685

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the PCI: keystone component. This occurs when IORESOURCE MEM is not provided in the Device Tree due to an...

ZITADEL 安全漏洞

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era, open sourced by ZITADEL in Switzerland. A security vulnerability exists in ZITADEL versions prior to 2.50.0 that stems from an improper application locking...

PT-2024-31316

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A null pointer dereference vulnerability has been resolved in the Linux kernel. The issue occurs in the dtInsertEntry function when the pointer h has the same value as p, causing the...

PT-2024-22309 · Sap · Sap Netweaver Process Integration

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration PI version 7.50 Description: Under certain conditions, the Support Web Pages of SAP NetWeaver Process Integration PI allow an attacker to access information that would otherwise be restricted, causing low...

PT-2024-21063 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Enterprise Portal version 7.50 Description: The issue allows an attacker to access information that would otherwise be restricted, causing low impact on the confidentiality of the application, with no impact on the integrity and...