17606 matches found
CVE-2024-5411
creationtimestamp| type| source ---|---|--- 2024-05-28 13:37:59+00:00| seen| https://t.me/HackingInsights/1004 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-15...
Trusted relationship attacks: trust, but verify
IT outsourcing market continues to demonstrate strong growth globally โ such services are becoming increasingly popular. But along with the advantages, such as saved time and resources, delegating non-core tasks creates new challenges in terms of information security. By providing third-party...
Oracle Linux 8 : libsndfile (ELSA-2024-3030)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3030 advisory. 1.0.28-14 - fix integer overflows causing CVE-2022-33065 RHEL-3750 Tenable has extracted the preceding description block directly from the Oracle Linux security...
GHSA-PH62-FV59-VF9H silverstripe/framework users inadvertently passing sensitive data to LoginAttempt
All user login attempts are logged in the database in the LoginAttempt table. However, this table contains information in plain text, and may possible contain sensitive information, such as user passwords mis-typed into the username field. In order to address this a one-way hash is applied to the...
CVE-2024-5274
creationtimestamp| type| source ---|---|--- 2024-05-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1302 2024-05-24 12:15:54+00:00| exploited| https://t.me/thehackernews/5009 2024-05-24 12:27:55+00:00| exploited| https://t.me/informationsecuritychannel/52259 2024-05-24...
CVE-2021-47286
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the channel ID from the event ring element sent by the device which can be any value between 0 and 255. In order to prevent any out of bound...
CLOUD#REVERSER: From Cloud Storage to Command and Control
...
Requests `Session` object does not verify requests after making first request with verify=False
...
BELL-CVE-2023-52802
Bulletin has no description...
Certain HP LaserJet Pro Printers โ Potential Information Disclosure
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed. Update your printer...
Unredacting Pixelated Text
Experiments in unredacting text that has been pixelated...
CVE-2021-47378
A vulnerability was found in the Linux kernel's nvme-rdma driver where the driver failed to destroy a component cmid before another component qp was destroyed. This issue occurs when the kernel incorrectly manages memory during RDMA, leading to a potential use-after-free. Mitigation Red Hat has...
Attacks, Vulnerabilities and Actors 13 to 19 May 2024
...
Achieve Security Compliance with Wazuh File Integrity Monitoring
File Integrity Monitoring FIM is an IT security control that monitors and detects file changes in computer systems. It helps organizations audit important files and system configurations by routinely scanning and verifying their integrity. Most information security standards mandate the use of FI...
CVE-2024-34949
CVE-2024-34949 : Likeshop prior to 2.5.7 contains a SQL injection vulnerability in the OrderLogic::getOrderList function, exploitable via the /admin/order/lists.html endpoint. Evidence from Red Hat, NVD, OSV, and PT-Security confirms the affected software and the specific function/endpoint. Impac...