October 8, 2024-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5044096)

None None...

October 8, 2024-KB5044092 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

October 8, 2024-KB5044089 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

How Cloud-Based Solutions Are Transforming Software Quality Assurance

Cloud-based solutions are transforming the software quality assurance QA industry. As organizations increasingly migrate their development and verification…...

CVE-2024-47063 Computer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpoint

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. If a malicious CVAT user with permissions to either create a task, or edit an existing task can trick another logged-in user into visiting a maliciously-constructed URL, they can initiate a...

CVE-2024-47063 Computer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpoint

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. If a malicious CVAT user with permissions to either create a task, or edit an existing task can trick another logged-in user into visiting a maliciously-constructed URL, they can initiate a...

kernel: block: don't call rq_qos_ops->done_bio if the bio isn't tracked

A vulnerability was found in the Linux kernel, where improper handling of block I/O requests when a block I/O request bio is not tracked, the kernel erroneously calls the rqqosops-donebio function, potentially leading to use-after-free issues. This situation can occurr when the request queue is...

CGA-RM26-RMF3-QJQC

Bulletin has no description...

July 9, 2024—KB5040438 (OS Build 25398.1009)

None None...

September 10, 2024—KB5043055 (OS Build 25398.1128)

None None...

September 10, 2024—KB5042881 (OS Build 20348.2700)

None None...

PT-2024-6147 · Siemens · Sinec Nms +6

Name of the Vulnerable Software and Affected Versions: SIMATIC Information Server versions 2022 and 2024 SIMATIC PCS neo versions 4.0, 4.1 through 4.1 Update 2, and 5.0 SINEC NMS versions prior to the fixed version Totally Integrated Automation Portal TIA Portal versions 16, 17 through 17 Update ...

KB5044412: Servicing stack update for Windows Server 2012: September 10, 2024

None None...

KB5043936: Servicing stack update for Windows 10: September 10, 2024

None None...

Binom3 Web Management Login Scanner, Config And Password File Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Binom3 Web Management Login Scanner, Config and Password File Dump', 'Description' = % This module scans for Binom3 Multifunctional Revenue Energ...

Cisco Application Policy Infrastructure Controller Access Control Error Vulnerability (CNVD-2025-03536)

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. The Cisco Application Policy Infrastructure Controller suffers from an Access Control Error vulnerability that stems from improper access control when using...

CVE-2024-20279

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service QoS policies, on an affected system. This...

CVE-2024-20279 Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service QoS policies, on an affected system. This...

PT-2024-5854 · Cisco · Cisco Application Policy Infrastructure Controller

Name of the Vulnerable Software and Affected Versions: Cisco Application Policy Infrastructure Controller APIC affected versions not specified Description: A vulnerability in the restricted security domain implementation could allow an authenticated, remote attacker to modify the behavior of...

D-Link DIR-846W 安全漏洞

D-Link DIR-846W is a dual-band Gigabit wireless router with second-generation 11AC technology and MU-MIMO technology, supporting dual-band concurrent transmission rates up to 1200Mbps for 200M and above broadband users. The D-Link DIR-846W suffers from a command execution vulnerability that...