7799 matches found
Qualys TRU Uncovers Five Local Privilege Escalation Vulnerabilities in needrestart
The Qualys Threat Research Unit TRU has identified five Local Privilege Escalation LPE vulnerabilities within the needrestart component, which is installed by default on Ubuntu Server. These vulnerabilities can be exploited by any unprivileged user to gain full root access without requiring user...
CVE-2024-5083
creationtimestamp| type| source ---|---|--- 2024-11-14 04:06:41+00:00| seen| https://t.me/cvedetector/10903 2025-01-22 17:00:51+00:00| seen| https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/ 2025-08-27 21:00:04+00:00| published-proof-of-concept|...
Transforming Threat Actor Research into a Strong Defense Strategy
Transforming Threat Actor Research into a Strong Defense Strategy By James Murphy, Ale Houspanossian, Leandro Velasco LV and Ilya Kolmanovich · November 14, 2024 What does it take to transform threat actor research into detection engineering? If we look at threat intelligence at its core, then we...
Palo Alto Expedition 1.2.91 Remote Code Execution
class MetasploitModule 'Palo Alto Expedition Remote Code Execution CVE-2024-5910 and CVE-2024-9464', 'Description' = %q Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below. The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the...
CVE-2024-2207
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities...
CVE-2024-2208
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities...
CVE-2024-2208 Sound Research SECOMN64 Escalation of Privilege
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities...
CVE-2024-2208 Sound Research SECOMN64 Escalation of Privilege
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities...
CVE-2024-2208
CVE-2024-2208 concerns HP PC products using the Sound Research SECOMN64 driver within the audio package. The vulnerability is described as potentially allowing local privilege escalation. Mitigation is via updated SECOMN64 drivers released by Sound Research, with HP documenting affected platforms...
CVE-2024-2207
Summary: CVE-2024-2207 concerns HP PC products using the Sound Research SECOMN64 driver in the audio package. The vulnerability potentially enables local escalation of privilege due to flaws in the driver. HP states that driver updates mitigate the issue, and HP has identified affected platforms ...
PT-2024-19184 · Sound Research · Sound Research Secomn64
Name of the Vulnerable Software and Affected Versions: HP PC products using the Sound Research SECOMN64 driver affected versions not specified Description: The issue is related to potential vulnerabilities in the audio package for certain HP PC products, specifically those using the Sound Researc...
Sound Research SECOMN64 Escalation of Privilege
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities. Sound Research has released...
CVE-2024-51713
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TRe Technology And Research S.r.l. HQ60 Fidelity Card hq60-fidelity-card allows Reflected XSS.This issue affects HQ60 Fidelity Card: from n/a through = 1.8...
CVE-2024-51713
CVE-2024-51713 is a reflected XSS vulnerability in HQ60 Fidelity Card (TRe Technology And Research S.R.L) plugin. Affected: HQ60 Fidelity Card from n/a to 1.8. Reported CVSS 3.1 (7.1, HIGH) with NETWORK attack vector, UI interaction required. No explicit mitigation or fix details are provided in ...
CVE-2024-51713 WordPress HQ60 Fidelity Card plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TRe Technology And Research S.r.l. HQ60 Fidelity Card hq60-fidelity-card allows Reflected XSS.This issue affects HQ60 Fidelity Card: from n/a through = 1.8...
Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager
CVE-2024-47575 Fortinet FortiManager Unauthenticated Remote Co...
Introducing the next generation of AI-powered remediation: Choose your own remediation strategy
The new AI-powered remediation 2.0 combines the power of GenAI with the Wiz Research Team’s expertise in identifying cloud-native attack paths...
How LLMs could help defenders write better and faster detection
Most users will associate large language models LLMs like ChatGPT with answering basic questions or helping to write basics lines of text. But could these tools actually help defenders in the cybersecurity industry write more effective detection content? Several security researchers from across...
Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security
Apple has publicly made available its Private Cloud Compute PCC Virtual Research Environment VRE, allowing the research community to inspect and verify the privacy and security guarantees of its offering. PCC, which Apple unveiled earlier this June, has been marketed as the "most advanced securit...