17606 matches found
CVE-2023-41820
An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices...
CVE-2023-42080
PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2024-26999
In the Linux kernel, the following vulnerability has been resolved: serial/pmaczilog: Remove flawed mitigation for rx irq flood The mitigation was intended to stop the irq completely. That may be better than a hard lock-up but it turns out that you get a crash anyway if you're using pmaczilog as ...
CVE-2024-27058
In the Linux kernel, the following vulnerability has been resolved: tmpfs: fix race on handling dquot rbtree A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree. Fetching the rbtree root node must also be protected by the dqopt-dqiosem, otherwise,...
CVE-2024-26925
creationtimestamp| type| source ---|---|--- 2024-05-01 10:25:36+00:00| seen| https://t.me/cKure/12825 2024-05-08 06:58:35+00:00| published-proof-of-concept| https://t.me/proxybar/2042 2024-05-14 03:25:11+00:00| published-proof-of-concept| Telegram/ONTm-2WDCEf1qMlm56GPClr2vzJ1RodUa1bCVnKA5sNV8WX...
CVE-2024-32210
The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...
CVE-2024-4340 Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.
Passing a heavily nested list to sqlparse.parse leads to a Denial of Service due to RecursionError...
PT-2024-25257 · Unknown · Css Exfil Protection
Name of the Vulnerable Software and Affected Versions: CSS Exfil Protection version 1.1.0 Description: An issue in CSS Exfil Protection allows a remote attacker to obtain sensitive information due to missing support for CSS variables. Recommendations: For CSS Exfil Protection version 1.1.0, at th...
CVE-2024-27322
Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS R Data Serialization formatted file or R package to run arbitrary code on an end user’s system when interacted...
CVE-2024-4309 SQL injection vulnerability in HubBank
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints /user/transaction.php?id=1, /user/credit-debittransaction.php?id=1,/user/viewtransaction. php?id=1 and...
Chef Manage Detection
Binary data chefmanagewebdetect.nbin...
l-w.nl Improper Access Control vulnerability OBB-3922868
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PYSEC-2024-232
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...
CVE-2024-27956
creationtimestamp| type| source ---|---|--- 2024-04-25 20:40:42+00:00| seen| https://t.me/CyberSecurityIL/43564 2024-04-26 08:00:07+00:00| exploited| https://t.me/thehackernews/4878 2024-04-26 09:03:37+00:00| exploited| https://t.me/KomunitiSiber/1850 2024-04-26 09:20:55+00:00| exploited|...
CVE-2024-26926
In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in bindergetobject Commit 6d98eb95b450 "binder: avoid potential data leakage when copying txn" introduced changes to how binder objects are copied. In doing so, it unintentionally removed an offset...
CVE-2024-26923
A flaw was found in the Linux kernel, where the management of inter-process communication uses AFUNIX sockets. The issue arises from a race condition where a partially initialized socket with specific permissions carrying SCMRIGHTS is improperly handled during garbage collection. This situation...
Cyber Horizon Annual Threat Report 2023
...
CVE-2024-26925
A flaw was found in the Linux kernel’s Netfilter nftables module. The issue arises from improper mutex handling during the garbage collection GC process. The problem occurs between the critical functions nftgcseqbegin and nftgcseqend, where a mutex lock is incorrectly released too early, leading ...
CVE-2024-32879
A flaw was found in social-auth-app-django. In affected versions of this package, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to match...