CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2024-49111

CVE-2024-49111 is a Windows Wireless Wide Area Network Service elevation-of-privilege vulnerability. The CVSS 3.1 base metrics show a MEDIUM severity (6.6), with the attack vector as physical and low privileges required , no user interaction, and impacts to confidentiality, integrity, and availab...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2024-49094 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

...

CVE-2024-49068

CVE-2024-49068 is a Microsoft SharePoint Elevation of Privilege vulnerability. The entry lists a high-severity impact with CVSSv3.1: base score 8.2 (NETWORK, ATTACK VECTOR), no user interaction, no privileges required, and CONFD/HIGH impact on confidentiality, LOW on integrity, NONE on availabili...

CVE-2024-49101

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:07:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113630331175468128...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

Full-Face Masks to Frustrate Identification

This is going to be interesting. It's a video of someone trying on a variety of printed full-face masks. They won't fool anyone for long, but will survive casual scrutiny. And they're cheap and easy to swap...

CVE-2024-10959

creationtimestamp| type| source ---|---|--- 2024-12-10 11:13:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113628229621507746 2024-12-10 13:17:32+00:00| seen| https://t.me/cvedetector/12496...

CVE-2024-52538

creationtimestamp| type| source ---|---|--- 2024-12-10 10:21:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113628025811609242 2024-12-10 13:17:28+00:00| seen| https://t.me/cvedetector/12495 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1691/...

CVE-2024-8805

creationtimestamp| type| source ---|---|--- 2024-12-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1647/ 2024-12-17 15:59:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113668991825517358 2024-12-17 17:36:47+00:00| seen| https://t.me/cvedetector/13102...

CVE-2024-55637

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

CVE-2024-50920

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

CVE-2024-46442

An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack...

CVE-2024-50626

creationtimestamp| type| source ---|---|--- 2024-12-09 21:28:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113624985735998812 2024-12-09 23:54:39+00:00| seen| https://t.me/cvedetector/12454...

CVE-2024-55601

Hugo, a static site generator, is affected in versions 0.123.0 through 0.139.3 (prior to 0.139.4). The issue: certain HTML attributes in Markdown in internal templates are not escaped in render hooks, specifically in templates _default/_markup/render-link.html (v0.123.0), _default/_markup/render-...

CVE-2024-11454

CVE-2024-11454 is an untrusted search path vulnerability in Autodesk Revit. A maliciously crafted DLL placed in the same directory as an RVT file could be loaded by Revit, allowing arbitrary code execution in the current process due to an untrusted search path being used. The available documents ...

CVE-2024-54935

creationtimestamp| type| source ---|---|--- 2024-12-09 17:20:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113624010863351122 2024-12-09 19:43:21+00:00| seen| https://t.me/cvedetector/12423...