PT-2023-12470

Name of the Vulnerable Software and Affected Versions Spiceworks Help Desk Server versions prior to 1.3.3 Description A Blind Boolean SQL injection issue exists within the order by for ticket function in app/models/reporting/database query.rb, allowing an authenticated attacker to execute arbitra...

Zavio CF Series Operating System Command Injection Vulnerability

Zavio CF Series is a series of webcams from Zavio. The Zavio CF Series suffers from an operating system command injection vulnerability that stems from a command injection vulnerability when executing binaries and handling network requests. The following products are affected: CF7500, CF7300,...

Mitsubishi Electric GOT and Tension Controller (CVE-2021-20589)

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

MAI-2023-0004

Multimodal Large Language Models MLLMs are susceptible to a newly identified attack vector involving query-relevant images. These images, crafted using advanced techniques such as Stable Diffusion and typography, can circumvent established safety protocols and provoke unsafe outputs, even when th...

MAI-2023-0006

Large Vision-Language Models VLMs are susceptible to exploitation through typographic visual prompts, a method known as jailbreaking. This vulnerability arises from the VLM's capability to process and interpret text embedded within images, circumventing safety protocols that are typically effecti...

PT-2023-6773 · Zavio · Zavio B8220 +10

Name of the Vulnerable Software and Affected Versions: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras version M2.1.6.05 Description: The issue is caused by a stack-based overflow in the firmware of the affected IP cameras. During the proce...

CVE-2022-4574

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2022-4574

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2022-4574

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code...

Trellix 2024 Threat Predictions

Trellix 2024 Threat Predictions By Trellix · October 30, 2023 Introduction This last year we have seen upheaval across the cybersecurity landscape. The need for effective, worldwide threat intelligence continues to grow as geopolitical and economic developments create an increasingly complicated...

The vulnerability of the upnp_ctrl.asp function in the microprogramming software for D-Link routers such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G allows a hacker to execute arbitrary code.

The vulnerability of the upnpctrl.asp function in the microprogramming software for D-Link routers such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation output goes beyond the buffer in memory. Exploiting this vulnerability allo...

PT-2023-32300 · Synology · Synology Camera Firmware

Name of the Vulnerable Software and Affected Versions: Synology Camera Firmware versions prior to 1.0.5-0185 Description: A vulnerability regarding the use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified...

Buffer Error Vulnerability in Multiple D-Link Products

The D-Link DI-7003G is a wireless router from China-based AUO D-Link. A buffer error vulnerability exists in multiple D-Link products, which originates from arbitrary code execution via the wild/mx parameter of the ddns.asp function. The following products are affected: D-Link DI-7003G, D-Link...

The vulnerability relates to the set of tools and libraries used for creating, importing, and exporting 3D models with the Autodesk FBX SDK. It stems from writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the tools and libraries used for creating, importing, and exporting 3D models in the Autodesk FBX SDK is related to writing data beyond buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability relates to the set of tools and libraries used for creating, importing, and exporting 3D models with the Autodesk FBX SDK. It stems from writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the tools and libraries used for creating, importing, and exporting 3D models in the Autodesk FBX SDK is related to writing data beyond buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Webinar: How vCISOs Can Navigating the Complex World of AI and LLM Security

In today's rapidly evolving technological landscape, the integration of Artificial Intelligence AI and Large Language Models LLMs has become ubiquitous across various industries. This wave of innovation promises improved efficiency and performance, but lurking beneath the surface are complex...

models-hannover.de Cross Site Scripting vulnerability OBB-3736027

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New OS Tool Tells You Who Has Access to What Data

Ensuring sensitive data remains confidential, protected from unauthorized access, and compliant with data privacy regulations is paramount. Data breaches result in financial and reputational damage but also lead to legal consequences. Therefore, robust data access security measures are essential ...

The vulnerability of the networking component of Microprogramming Software for Cisco Access Points models 9124, 9130, 9136, 9164, and 9166 allows a hacker to cause service interruptions.

The vulnerability of the networking component of Microprogramming Software for Cisco Access Points models 9124, 9130, 9136, 9164, and 9166 is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Security Bulletin: IBM Jazz Reporting Service is vulnerable to XML external entity (XXE) attacks due to a vulnerability in XML processing in Apache Jena, in versions up to 4.1.0 (CVE-2021-39239)

Summary IBM Jazz Reporting Service is vulnerable to CVE-2021-39239 due to a vulnerability in XML processing in Apache Jena, in versions up to 4.1.0. Apache Jena is used by IBM Jazz Reporting Service for working with RDF models. The fix disables external entity processing in calls made to the...