CVE-2024-39816

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-38386

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

CVE-2024-39816

OpenHarmony has a local, out-of-bounds write vulnerability in Arkcompiler Ets Runtime affecting v4.1.0 and earlier, enabling a local attacker to achieve arbitrary code execution in pre-installed apps. Root cause is described as an out-of-bounds write in the Ark eTS runtime. Affected component/fun...

CVE-2024-38386

OpenHarmony CVE-2024-38386 affects v4.1.0 and earlier, with a local arbitrary-code-execution via an out-of-bounds write in the Ark eTS/Arkcompiler runtime. The issue enables local attackers to run code within pre-installed apps. The public documents consistently describe the vulnerability as an o...

CVE-2024-38386 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write...

MAL-2024-8408 Malicious code in @diotoborg/magnam-incidunt-quasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb0f77812a705acc83ecd921607edc1a49f4441d3186c734fe45caa66fa3c621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consequatur-velit-quae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0b70a26b279d79121a625882b3ff6184039a5428c63b9c4360ddf09f1f25714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 40 : python3.11 (2024-985017d277)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-985017d277 advisory. Security fix for CVE-2024-8088 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to the use of pre-installed user accounts, allows a hacker to disclose and alter sensitive information that is protected by the system.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to disclose and modify the protected information...

Fedora 39 : python3.6 (2024-a7af4e0ea2)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a7af4e0ea2 advisory. Security fix for CVE-2024-6923 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ThingWorx Kepware Server Installed (Windows)

Binary data thingworxkepwareserverwininstalled.nbin...

Johnson Controls exacqVision Client Installed (Linux)

Binary data johnsoncontrolsexacqvisionclientnixinstalled.nbin...

[SECURITY] Fedora 40 Update: iaito-5.9.4-1.fc40

iaito is a Qt and C++ GUI for radare2. It is the continuation of Cutter before the fork to keep radare2 as backend. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. The iaito is created by reverse engineers for reverse...

TeamViewer Installed (Linux)

Binary data teamviewerlinuxinstalled.nbin...

GeoSolutionsGroup Jai-Ext Installed Packages (Linux / Unix)

Binary data geosolutionsjaiextnixinstalled.nbin...

7-Year-Old Pre-Installed Google Pixel App Flaw Puts Millions at Risk

A critical 7-year-old security flaw in a pre-installed app on millions of Google Pixel devices has been exposed.…...

PT-2024-7251 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to the presence of pre-installed credentials in the software. Exploitation of this issue may allow a remote attacker to elevate their privileges within the system and...