4067 matches found
CVE-2024-50408
Deserialization of Untrusted Data vulnerability in Kiboko Labs Namaste! LMS allows Object Injection.This issue affects Namaste! LMS: from n/a through 2.6.3...
CVE-2024-50408
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...
CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...
CVE-2024-50408
CVE-2024-50408 concerns Namaste! LMS for WordPress. The Namaste! LMS plugin, versions n/a through 2.6.3, is affected by a PHP Object Injection vulnerability due to unsafe deserialization of untrusted data, enabling object injection. This entry is corroborated by Patchstack, Red Hat, CVE records, ...
CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...
AWS VDP: A potential risk in the cloudFrontExtensionsConsole which can be used to privilege escalation.
A potential risk was found in the cloudFrontExtensionsConsole when it was deployed in the awslabs repository on GitHub. The functions created by the application had excessive permissions that could be leveraged to escalate privileges...
CVE-2024-49311
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WisdmLabs Edwiser Bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through 3.0.7...
Amazon Linux 2 : unbound (ALAS-2024-2650)
The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2650 advisory. NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that i...
CloudGoat: New Scenario and Walkthrough (sns_secrets)
The post CloudGoat: New Scenario and Walkthrough snssecrets appeared first on Rhino Security Labs...
Amazon Linux 2 : unbound (ALASUNBOUND-1.17-2024-003)
The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2024-003 advisory. NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large...
Amazon Linux 2 : unbound (ALASUNBOUND-2024-003)
The version of unbound installed on the remote host is prior to 1.13.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-2024-003 advisory. NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets...
CVE-2024-48795
An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process...
Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration
A suspected nation-state adversary has been observed weaponizing three security flaws in Ivanti Cloud Service Appliance CSA as zero-days to perform a series of malicious actions. That's according to findings from Fortinet FortiGuard Labs, which said the vulnerabilities were abused to gain...
CVE-2024-48795
The CVE-2024-48795 entry concerns Creative Labs com.creative.apps.xficonnect 2.00.02, where a flaw in the firmware update process could allow a remote attacker to obtain sensitive information. Affected component: com.creative.apps.xficonnect runtime/firmware update flow. Underlying cause and exac...
CVE-2024-48795
An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48795
An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process...
Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2024-719)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-719 advisory. NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses...
CBL Mariner 2.0 Security Update: unbound (CVE-2024-8508)
The version of unbound installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8508 advisory. - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with ve...
Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines
Users searching for game cheats are being tricked into downloading a Lua-based malware that is capable of establishing persistence on infected systems and delivering additional payloads. "These attacks capitalize on the popularity of Lua gaming engine supplements within the student gamer...
