PT-2024-35754 · Unknown · Simplcommerce

Name of the Vulnerable Software and Affected Versions: SimplCommerce version 230310c8d7a0408569b292c5a805c459d47a1d8f Description: A race condition issue in the checkout logic allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts f...

Apple macOS Logic Flaw Vulnerability

macOS is a set of operating systems developed by Apple to run on the Macintosh family of computers. A logic flaw vulnerability exists in Apple macOS Sequoia versions prior to 15.2, which can be exploited by an attacker to gain root privileges...

PT-2024-23746

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper Finite State Machines FSMs in the hardware logic of some IntelR Processors. This may allow a privileged user to potentially enable denial of service...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500 series CMU ICSA-24-354-02 Hitachi Energy SDM600...

PT-2024-32367 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible Use After Free UAF due to a logic error in the code. This could lead to local escalation of privilege with no...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from the inclusion of a logic error in the code that could lead to reuse after release...

Exploit for CVE-2024-55968

CVE-2024-55968 LPE Exploit POC for CVE-2024-55968 Vulnerab...

Elevation of Privilege Vulnerability in Multiple Apple Products (CNVD-2025-19516)

Apple macOS Sequoia is an operating system from Apple in the U.S. Apple macOS Ventura is a desktop operating system from Apple in the U.S. Apple macOS Sonoma is an operating system from Apple. An elevation of privilege vulnerability exists in multiple Apple products and is caused due to a logic...

The vulnerability of Intel Core Ultra processor microprogramming software, related to processor locking, allows a hacker to trigger a service failure.

The vulnerability of Intel Core Ultra microprogramming software is related to the locking of the processor due to discrepancies between the instruction set architecture ISA and the processor’s logic. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Intel microprogramming software, related to synchronization errors in control logic, allows attackers to exploit this to disclose protected information.

The vulnerability of Intel microprogramming software is related to synchronization errors in the control logic. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2024-12603

A logic vulnerability in the the mobile application com.transsion.applock can lead to bypassing the application password...

CVE-2024-12603

A logic vulnerability in the the mobile application com.transsion.applock can lead to bypassing the application password...

CVE-2024-12603

CVE-2024-12603 is a logic vulnerability in the mobile application com.transsion.applock (TECNO/Transsion). The issue allows bypassing the application password. Public records point to a logic flaw in the app that can enable access without the correct password. Available concrete details mention T...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

CVE-2024-54098 is a Huawei EMUI/HarmonyOS system service module vulnerability described as a service logic error that can affect service integrity. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with network attack vector but the Huawei CNA entry indicates local exploitation with low attack c...

Cross Site Scripting

rails-html-sanitizer is vulnerable to Cross Site Scripting. The vulnerability is due to a flaw in the sanitization logic, allowing crafted malicious payloads to be treated as safe. Attackers can use this to include dangerous HTML or scripts in sanitized content, potentially resulting in Cross-Sit...

Vulnerabilities fixed in macOS

Apple has fixed vulnerabilities in macOS Sequoia 15.2, Ventura 13.7.2, and Sonoma 14.7.2. The vulnerabilities include a use-after-free vulnerability that could lead to unexpected application termination or arbitrary code execution, and logic issues that allowed applications to modify protected...