2498 matches found
CVE-2024-40430
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-40430
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-40430
CVE-2024-40430 is rejected and not an active vulnerability entry.
Defending Against APTs: A Learning Exercise with Kimsuky
The “evolving threat landscape” is a term we often hear within webinars and presentations taking place across the cybersecurity industry. Such a catch-all term is intended to capture the litany of threat groups and their evolving tactics, but in many ways it fails to truly acknowledge the growth ...
BELL-CVE-2024-40923
Bulletin has no description...
CGA-9C8X-GHW4-J2Q7
Bulletin has no description...
The vulnerability of the Azure DevOps Server software lies in the lack of protective measures for the website structure, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Azure DevOps Server development tool is related to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...
Exploit for Code Injection in Geoserver
RCE vulnerability in GeoServer CVE-2024-36401 - detection sc...
Hidden between the tags: Insights into spammers’ evasion techniques in HTML Smuggling
Cisco Talos has spotted several malicious email campaigns over the past few months that disguise JavaScript code within HTML email attachments, a technique commonly known as "HTML Smuggling." Cisco Talos has noticed that some industry verticals were targeted more than others by email threats usin...
Blueprint for Success: Implementing a CTEM Operation
The attack surface isn't what it once was and it's becoming a nightmare to protect. A constantly expanding and evolving attack surface means risk to the business has skyrocketed and current security measures are struggling to keep it protected. If you've clicked on this article, there's a good...
CGA-VG47-GC35-3V95
Bulletin has no description...
MAL-2024-7198 Malicious code in @zitterorg/error-quisquam (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c551ad7c762ab7c8fb3fa485a06a56f36eecbed77978447c95958cd5ab4fbb45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
mySCADA myPRO
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : mySCADA Equipment : myPRO Vulnerability : Use of Hard-coded Password 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely execute code on the...
Rejected reason: We issued this CVE pre-maturely as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.
...
PT-2024-37089 · Devika · Devika
Name of the Vulnerable Software and Affected Versions: stitutionai/devika version latest Description: A Cross-Site Request Forgery CSRF issue was identified, allowing attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application...
Johnson Controls Illustra Essentials Gen 4 (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Johnson Controls, Inc. Equipment : Illustra Essentials Gen 4 Vulnerability : Storing Passwords in a Recoverable Format 2. RISK EVALUATION Successful exploitation of this vulnerability may...
Essential Strategies to Secure Your Web Applications and APIs in a Modern Application Development World
In today’s interconnected digital world, the role of web applications and APIs has become central to business operations, acting as gateways to vast amounts of valuable data and services. However, their widespread use and accessibility make them prime targets for cybercriminals, posing substantia...
PT-2024-27732 · Datagear · Datagear
Name of the Vulnerable Software and Affected Versions: DataGear versions 5.0.0 and earlier Description: A SpEL Spring Expression Language expression injection issue was found in the Data Viewing interface. This allows for potential malicious activity via the injection of expressions...