The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in the lack of mechanisms for generating error reports. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities can allow attackers operating remotely to...

[SECURITY] Fedora 40 Update: haproxy-2.9.10-1.fc40

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

CVE-2024-4465

An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with reporting privileges learns how to create a specific application request, they might be able to make...

Nozomi Networks Guardian/CMC 安全漏洞

Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. A security vulnerability exists in Nozomi Networks Guardian/CMC that stems from access controls in the reporting section not being properly enforced for limited privilege users, which...

PT-2024-31201 · Unknown · Guardian/Cmc

Name of the Vulnerable Software and Affected Versions: Guardian/CMC affected versions not specified Description: An access control issue was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user wi...

CVE-2024-44000

creationtimestamp| type| source ---|---|--- 2024-09-05 14:18:45+00:00| published-proof-of-concept| https://t.me/WARLOCKDARKARMYOFFICIALS/4554 2024-09-05 16:31:47+00:00| published-proof-of-concept| Telegram/iqzr0evsZIMMy3NnASIGxZl2nBENTlvbGPIFKVphLoM3UsM 2024-09-06 03:57:32+00:00|...

How to avoid election related scams

With the US election campaigns at full throttle, scammers have taken a renewed interest in the ways this can be used to defraud people, often using the same tactics legitimate campaigns leverage for support emails, text messages, phone calls, and social media pleas. The lure that we have seen the...

CVE-2024-45195

creationtimestamp| type| source ---|---|--- 2024-09-04 11:53:36+00:00| seen| https://t.me/cvedetector/4781 2024-09-06 07:47:53+00:00| seen| https://t.me/thehackernews/5532 2024-09-06 09:13:35+00:00| published-proof-of-concept| Telegram/EFBeGFmA75ewgbU3HNfojE07wPqv1eLOdUnFt8ddrNP22g 2024-09-06...

kernel: crypto: qat - resolve race condition during AER recovery

A race condition was found in drivers/crypto/intel/qat/qatcommon/adfaer.c in the Linux kernel during AER recovery...

Security Bulletin: IBM Jazz Reporting Services is vulnerable to a to cross-site scripting (CVE-2020-4051)

Summary Cross-site scripting has been identified in dojo library shipped with IBM Jazz Reporting Services JRS. JRS has addressed the issues by releasing a fix Vulnerability Details CVEID:CVE-2020-4051 DESCRIPTION: Dijit is vulnerable to cross-site scripting, caused by improper validation of...

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM SDK, Java Technology Edition Quarterly CPU - Jul 2024 are affected by multiple vulnerabilities

Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their July 2024 Critical Patch Update, plus CVE-2024-27267. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed i...

CVE-2024-45048

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows for an XXE-attack. This in turn allows attacker to obtain contents of local files, even if error reporting is muted. This vulnerability has been...

Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations

Summary The Federal Bureau of Investigation FBI, Cybersecurity and Infrastructure Security Agency CISA, and the Department of Defense Cyber Crime Center DC3 are releasing this joint Cybersecurity Advisory CSA to warn network defenders that, as of August 2024, a group of Iran-based cyber actors...

CVE-2024-6448

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

CVE-2024-6448

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

CVE-2024-6448 Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

CVE-2024-6448

CVE-2024-6448 affects Mollie Payments for WooCommerce for WordPress. All versions up to 7.7.0 expose information due to error reporting being enabled by default in multiple plugin files, allowing unauthenticated attackers to obtain the full path to the WordPress instance. The disclosure is descri...

WordPress plugin Mollie Payments for WooCommerce 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

PT-2024-37635 · WordPress · Mollie Payments For Woocommerce

Name of the Vulnerable Software and Affected Versions: Mollie Payments for WooCommerce plugin for WordPress versions up to, and including, 7.7.0 Description: The issue is related to information exposure due to error reporting being enabled by default in multiple plugin files. This allows...

[SECURITY] Fedora 39 Update: zabbix-6.0.33-1.fc39

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...