Telerik Report Server Code Execution

The vulnerability of the Telerik Report Server reporting control software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

io.jenkins.plugins:nested-data-reporting (5.2.1) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3653.v07ea_433c90b_4)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3653.v07ea433c90b4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:nested-data-reporting 5.2.1 Source cves...

io.jenkins.plugins:code-coverage-api (>=4.2.0, <=4.4.0), io.jenkins.plugins:nested-data-reporting (5.2.1) +1 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1228.vd93135a_2fb_25)

org.jenkins-ci.plugins:script-security MAVEN version 1228.vd93135a2fb25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:code-coverage-api =4.2.0, =4.4.0 -...

CVE-2024-28049

creationtimestamp| type| source ---|---|--- 2024-11-13 20:54:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113477632553221791...

CVE-2024-51996

creationtimestamp| type| source ---|---|--- 2024-11-13 16:20:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113476554727172279 2024-11-13 18:54:23+00:00| seen| https://t.me/cvedetector/10850 2025-04-15 05:00:08+00:00| published-proof-of-concept|...

kernel: iommu/vt-d: Use device rbtree in iopf reporting path

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The Linux kernel CVE team has assigned CVE-2024-35843 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051717-CVE-2024-35843-516e@gregkh/T...

Fortinet FortiManager and FortiAnalyzer security vulnerabilities

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...

Fortinet FortiManager and FortiAnalyzer security vulnerabilities

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...

PT-2024-10205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the connector status of the glink component in the Linux kernel's USB-C connector status. The UCSI connector's indices start from 1 up to 3...

CVE-2024-50634

creationtimestamp| type| source ---|---|--- 2024-11-08 17:11:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113448443209203280 2024-11-08 18:52:58+00:00| seen| https://t.me/cvedetector/10208 2026-10-04 05:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mwzmydew2k2z...

IBM: SQL injection identified on IBM endpoint.

SQL injection vulnerability was identified on an IBM endpoint. The issue was reported to IBM, analyzed, and remediated...

CVE-2024-50139

creationtimestamp| type| source ---|---|--- 2024-11-07 09:34:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113440984913066438 2024-11-07 09:37:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113440996205884449...

CVE-2024-10840

creationtimestamp| type| source ---|---|--- 2024-11-05 13:02:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113430477504281459 2024-11-05 14:42:00+00:00| seen| https://t.me/cvedetector/9864...

Malicious code in bytesap (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4eec30f2d541d35548fef109eb76c972e92203c749f615aa08f976fb9b0c2a03 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

ZOHO ManageEngine Exchange Reporter Plus security vulnerabilities

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...

Embarking on a Compliance Journey? Here's How Intruder Can Help

Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria these frameworks demand, making your compliance journey much smoother. Read on to understa...

Usermin Password Change Brute Force

The vulnerability of the passwordchange.cgi script in the Webmin hosting panel and the web interface for Unix-like systems, Usermin, is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor to execute an attack using brute-force methods...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 16033.43.0 Browser version: 130.0.6723.84 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

CVE-2024-44285

creationtimestamp| type| source ---|---|--- 2024-10-28 22:51:52+00:00| seen| https://t.me/cvedetector/9191 2024-11-30 13:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9261 2024-11-30 21:09:43+00:00| published-proof-of-concept| https://t.me/proxybar/2395 2024-11-30...

Europol warns about counterfeit goods and the criminals behind them

With the holidays around the bend, many are looking for gifts for their family and friends. And since we somehow decided we want to give more each time, we’re also looking for good deals. But European law enforcement agency Europol issued a warning about buying fake goods. Sure, they are cheaper,...