The vulnerability of the add_option() function in the ISC DHCP configuration program allows a attacker to cause a service failure.

The vulnerability of the addoption function in the ISC DHCP configuration program is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2024-45229

The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can ...

Everything you need to know about VPN tracking

A VPN Virtual Private Network adds privacy and security to your browsing. But does this make your internet…...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

Command Execution Vulnerability in T+

T+ is a new Internet-based business management software. A command execution vulnerability exists in Changjitong T+, which can be exploited by an attacker to execute arbitrary commands on the target server...

The vulnerability of the AVG Internet Security antivirus protection lies in the use of dangerous methods or functions, which allow attackers to enhance their privileges.

The vulnerability of the AVG Internet Security antivirus protection lies in the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates from a camera extension that may be able to access the Internet...

CVE-2024-27795

CVE-2024-27795 affects macOS Sequoia 15 where a permissions issue could allow a camera extension to access the Internet. Apple fixed this with additional restrictions in Sequoia 15; multiple sources consistently describe it as a permissions restriction issue resolved by a patch. Connected documen...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

Legacy Ivanti Cloud Service Appliance Being Exploited

CISA wants everyone--and government agencies in particular--to remove or upgrade an Ivanti Cloud Service Appliance CSA that is no longer being supported. Welcome to the security nightmare that is the Internet of Things...

PT-2024-22039 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue allows a camera extension to potentially access the internet. Recommendations: For versions prior to 15, update to macOS Sequoi...

[SECURITY] Fedora 41 Update: seamonkey-2.53.19-1.fc41

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-2024-41609)

T+ is a new Internet-based business management software. Ltd. A SQL injection vulnerability exists in Changjitong T+, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2024-6510

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...

CVE-2024-6510

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...

CVE-2024-6510

AVG Internet Security for Windows v24 is affected by a local privilege escalation described as COM-Hijacking. The issue enables a local unprivileged user to escalate to SYSTEM through compromised COM interactions. Affected component/behavior and root cause are described in multiple sources (inclu...

CVE-2024-6510 Local privilege escalation vulnerability in AVG Internet Security

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...