The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system-based Cryptographic Services is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

Information Disclosure

typo3/cms is vulnerable to Information Disclosure. The vulnerability is due to improper permission checks, allowing editors to gain knowledge of protected storages and their folders. Attackers can exploit this by using a valid backend user account to include protected files in a collection render...

The vulnerability of the Adobe Media Encoder application, related to the execution of operations beyond the buffer in memory, allows an attacker to disclose protected information.

The vulnerability of the Adobe Media Encoder application relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the ColdFusion software platform, related to weak cryptography for passwords, allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to the weak cryptography used for passwords. Exploiting this vulnerability allows attackers to bypass existing security restrictions and gain unauthorized access to protected information...

The vulnerability of the Downloads component of Microsoft Edge and Google Chrome browsers allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the ColdFusion software platform, related to improper access control, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to improper access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Audio component in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Audio component in Microsoft Edge and Google Chrome lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to expose sensitive information through specially created PDF files...

The vulnerability of Kubernets Rancher cluster management software lies in the lack of access restrictions on protected information. This allows attackers to expose the protected data and gain administrative control over the Kubernetes cluster.

The vulnerability of Kubernets Rancher cluster management software is related to the lack of restrictions on access to protected information. Exploiting this vulnerability allows a malicious actor to disclose protected data and gain administrative control over the Kubernetes cluster...

The vulnerability of the Svacer SAST application, a static analyzer for Svace, relates to the disclosure of information, allowing an intruder to gain access to protected information.

The vulnerability of the Svacer SAST static analyzer app is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the Fortinet FortiPortal security analysis and management tool lies in the lack of protective measures for the SQL query structure, allowing attackers to disclose protected information.

The vulnerability of the Fortinet FortiPortal security analysis and management tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

Info Stealing Campaign Uses DLL Sideloading Through Legitimate Cisco Webex’s Binaries for Initial Execution and Defense Evasion

Info Stealing Campaign Uses DLL Sideloading Through Legitimate Cisco Webex’s Binaries for Initial Execution and Defense Evasion By Ale Houspanossian · June 17, 2024 Case Summary It was a quiet Monday morning in March 2024 when the EDR researchers with our Trellix Advanced Research Center identifi...

The vulnerability of the interface_authorized_store() function in the Linux kernel USB driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the interfaceauthorizedstore function in the drivers/usb/core/sysfs.c file of the Linux USB driver kernel is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2024-1295

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. e.g. password-protected events, drafts, etc...

The vulnerability of the graphical user interface of the Fortinet FortiPortal security analysis and management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the graphical user interface of the Fortinet FortiPortal security analysis and management tool is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software lies in the fact that protected information is stored in unencrypted form, allowing attackers to disclose the protected information.

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software lies in the storage of sensitive information in an unencrypted form. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

CVE-2024-38285 Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools...

CVE-2024-34113 ColdFusion | Weak Cryptography for Passwords (CWE-261)

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

Exploit for Insufficiently Protected Credentials in Kyocera Net_Viewer

kygocera CVE-2022-1026 Improved Golang Version of Rapid7 PoC...

CVE-2024-2098

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected fil...

CVE-2024-2098

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected fil...