Vulnerabilities fixed in Ivanti Endpoint Manager

Ivanti has fixed vulnerabilities in Endpoint Manager. A malicious party can exploit the vulnerabilities to execute arbitrary code on the system using SQL Injection. For successful abuse, the malicious party must have access to the local infrastructure where the EPM system is implemented...

CVE-2023-6951

creationtimestamp| type| source ---|---|--- 2024-06-14 02:58:30+00:00| published-proof-of-concept| https://t.me/VasileiadisAnastasis/1144 2026-08-11 12:00:03+00:00| published-proof-of-concept| Telegram/Su9bpnflFfDGX-VykbbjfDva2inKgORDHhpa7uGZjAV6g 2026-08-12 00:00:08+00:00|...

CVE-2023-6949

creationtimestamp| type| source ---|---|--- 2024-06-14 02:58:30+00:00| published-proof-of-concept| https://t.me/VasileiadisAnastasis/1144 2026-08-11 12:00:03+00:00| published-proof-of-concept| Telegram/Su9bpnflFfDGX-VykbbjfDva2inKgORDHhpa7uGZjAV6g 2026-08-12 00:00:08+00:00|...

bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...

bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...

CVE-2024-27282

creationtimestamp| type| source ---|---|--- 2024-06-12 23:57:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7631...

CVE-2024-4484

creationtimestamp| type| source ---|---|--- 2024-06-12 23:13:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7630...

Exploit for SQL Injection in Ivanti Endpoint_Manager

CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution...

CVE-2024-31217

creationtimestamp| type| source ---|---|--- 2024-06-12 13:02:22+00:00| published-proof-of-concept| https://github.com/strapi/strapi/security/advisories/GHSA-pm9q-xj9p-96pm...

CVE-2024-36416

creationtimestamp| type| source ---|---|--- 2024-06-12 06:33:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7618...

CVE-2024-37301

creationtimestamp| type| source ---|---|--- 2024-06-11 17:49:20+00:00| published-proof-of-concept| https://github.com/adfinis/document-merge-service/security/advisories/GHSA-v5gf-r78h-55q6...

Exploit for Insufficiently Protected Credentials in Jetbrains Aqua

CVE-2024-37051-EXP CVE-2024-3...

CVE-2024-5585

creationtimestamp| type| source ---|---|--- 2024-06-11 13:54:52+00:00| published-proof-of-concept| https://t.me/HackingInsights/2165...

CVE-2024-5452

creationtimestamp| type| source ---|---|--- 2024-06-11 13:54:51+00:00| published-proof-of-concept| https://t.me/HackingInsights/2161 2024-11-22 07:41:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9128...

Vulnerabilities fixed in Veeam Backup Enterprise Manager

Veeam has fixed vulnerabilities in Backup Enterprise Manager. A malicious party could exploit the vulnerabilities to access user accounts active within Enterprise Manager without prior authentication to gain access to sensitive data within the context of the acquired account, and potentially...

CVE-2024-30212

creationtimestamp| type| source ---|---|--- 2024-06-11 09:17:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7600...

Oracle Database Password Hash Unauthorized Access

Title: CVE-2020-2969 – Unauthorized Access to Password Hashes by Account with DBA role Product: Database Manufacturer: Oracle Affected Versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Tested Versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Risk Level: Medium Solution Status: Fixed CVE Reference:...

CVE-2024-36821

creationtimestamp| type| source ---|---|--- 2024-06-10 15:54:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7589...

CVE-2024-36405

Removed by vendor...

CVE-2024-36405 Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...