CVE-2024-9683

A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affects the authentication mechanism, reducing the overall security of password enforcement. While the risk is relatively low due to the typical length of the...

CVE-2024-9675

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

TPAS Log4Shell PoC This repository contains a Proof of Concep...

CVE-2024-43601

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2024-11-08 22:25:07+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113449678045148282 2024-12-27 17:33:08+00:00| seen|...

CVE-2024-9369

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2024-11-27 17:56:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113556207192000192...

CVE-2024-43512

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...

CVE-2024-47393

creationtimestamp| type| source ---|---|--- 2024-10-05 17:58:11+00:00| seen| https://t.me/cvedetector/7090...

CVE-2024-47632

creationtimestamp| type| source ---|---|--- 2024-10-05 16:17:30+00:00| seen| https://t.me/cvedetector/7067...

Advisory ROSA-SA-2024-2502

Software: libndp 1.7 OS: ROSA Virtualization 2.1 packageevrstring: libndp-1.7-7.rv3 CVE-ID: CVE-2024-5564 BDU-ID: 2024-04337 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libndp library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could...

CVE-2024-47560

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local...

ASB-A-359692772

Bulletin has no description...

Synology DiskStation Manager Out-of-bounds Write (CVE-2021-31439)

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...

ASB-A-359699096

Bulletin has no description...

CVE-2024-28809

creationtimestamp| type| source ---|---|--- 2024-09-30 20:50:28+00:00| seen| https://t.me/cvedetector/6675 2024-10-01 16:38:54+00:00| seen| https://t.me/truesecator/6267...

CVE-2024-47532

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

CVE-2024-23924

creationtimestamp| type| source ---|---|--- 2024-09-28 10:18:20+00:00| seen| https://t.me/cvedetector/6603 2025-01-22 12:01:16+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3lgdczxofdc27 2025-01-23 07:29:50+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3lgfedodb6k2...

Too Good To Be True? For True Value, Look Beyond Vendors’ Sales Claims

...

CVE-2024-8609 Improper Access Control in Oceanic Software's ValeApp

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

NIST Recommends Some Common-Sense Password Rules

NIST's second draft of its "SP 800-63-4"--its digital identify guidelines--finally contains some really good rules about passwords: The following requirements apply to passwords: 1. lVerifiers and CSPs SHALL require passwords to be a minimum of eight characters in length and SHOULD require...

CVE-2024-47076

creationtimestamp| type| source ---|---|--- 2024-09-26 20:15:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-47076 2024-09-27 00:42:05+00:00| seen| https://t.me/cvedetector/6463 2024-09-27 04:15:35+00:00| seen|...