844 matches found
January 9, 2024-KB5034274 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
January 9, 2024-KB5033917 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2
None None...
January 9, 2024-KB5033910 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
None None...
January 9, 2024-KB5034272 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Azure Stack HCI, version 22H2
None None...
January 9, 2024-KB5033920 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2
None None...
IBM Maximo Application Suite Cross-Site Scripting Vulnerability
IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Maximo Application Suite version 7.6.1.3, which stems...
IBM Maximo Application Suite Log Information Disclosure Vulnerability
IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. A log information disclosure vulnerability exists in IBM Maximo Application Suite versions 8.10 and 8.11...
KB5035966: Servicing stack update for Windows 10: March 12, 2024
None None...
KB5035962: Servicing stack update for Windows 10, version 1607 and Server 2016: March 12, 2024
None None...
BoidCMS 2.0.0 Command Injection Exploit
This Metasploit module leverages CVE-2023-38836, an improper sanitization bug in BoidCMS versions 2.0.0 and below. BoidCMS allows the authenticated upload of a php file as media if the file has the GIF header, even if the file is a php file. This module requires Metasploit:...
Resource Exhaustion
bind9 is vulnerable to Resource Exhaustion. The vulnerability due to excessive CPU load on DNS message parsing code in named includes a section whose computational complexity is overly high. It leads to degraded performance, unresponsiveness, or denial of service, affecting the availability and...
Denial Of Service
Bind9 is vulnerable to denial of service. The vulnerability is due to asynchronous processes of named running as a recursive resolver component of BIND, when attempting to clean up its cache database which enables the list of queued cleanup events to grow infinitely large over time, allowing the...
Exploit for Out-of-bounds Write in Google Chrome
From: https://github.com/github/securitylab/tree/main/SecurityEx...
Saltstack Minion Payload Deployer Exploit
This Metasploit exploit module uses saltstack salt to deploy a payload and run it on all targets which have been selected default all. Currently only works against nix targets. This module requires Metasploit: https://metasploit.com/download Current source:...
Rapid7’s Data-Centric Approach to AI in Belfast
Authored by Stuart Millar and Ryan Wilson. Rapid7 has expanded significantly in Belfast since establishing a presence back in 2014, resulting in the company's largest R&D hub outside the US with over 350 people spread across eight floors in our Chichester Street office. There is a wide range of...
Themebleed Windows 11 Themes Arbitrary Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Themebleed- Windows 11 Themes Arbitrary Code Execution CVE-2023-38146', 'Description' = %q When an unpatched Windows 11 host loads a theme file...
Recommended number of Cloud Connectors for Citrix Cloud deployment.
A guideline for deploying Cloud Connectors to ensure optimal performance and reliability of Citrix Cloud services...
CVE-2023-44113
Vulnerability of missing permission verification for APIs in the Designed for Reliability DFR module. Successful exploitation of this vulnerability may affect service confidentiality...
Security feature bypass
Vulnerability of missing permission verification for APIs in the Designed for Reliability DFR module. Successful exploitation of this vulnerability may affect service confidentiality...
