CVE-2024-4593

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown processing of the file /src/dede/sysmultiserv.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2024-4591

The CVE concerns DedeCMS 5.7, with a CSRF issue in the file /src/dede/sys_group_add.php. The vulnerability enables cross-site request forgery via a potentially remote-initiated attack. Multiple sources in the provided documents identify the affected product and component, and note that the exploi...

CVE-2024-4589

CVE-2024-4589 affects DedeCMS 5.7, with vulnerability in the file /src/dede/mytag_edit.php leading to cross-site request forgery. The initial descriptions indicate a remote, publicly disclosed exploit and a non-specified impact on confidentiality and integrity, limited to CSRF (I:L) and no availa...

CVE-2024-4588

CVE-2024-4588 affects DedeCMS 5.7, with a CSRF flaw in /src/dede/mytag_add.php. The vulnerability is exploitable remotely and has publicly disclosed exploit information. Affected function is unspecified; vendor fix/version not clearly documented in the provided sources. Reports from multiple feed...

CVE-2024-4587 DedeCMS tpl.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-4585

CVE-2024-4585 affects DedeCMS 5.7, with the vulnerability located in the file /src/dede/member_type.php. The issue is described as a cross-site request forgery (CSRF) that can be initiated remotely and for which exploits have been disclosed to the public. Multiple sources in the connected documen...

nscd: Null pointer crashes after notfound response

...

CVE-2024-33600

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This...

CVE-2024-33600 nscd: Null pointer crashes after notfound response

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This...

CVE-2024-33600

CVE-2024-33600 is an in-nscd (Name Service Cache Daemon) null pointer dereference caused by a failure to cache a not-found netgroup response. It affects the nscd binary and was introduced with glibc’s cache feature (glbic 2.15+). Exploitation depends on remote input, but the provided sources do n...

CVE-2024-4511

CVE-2024-4511 affects Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4, specifically an issue in the Message Handler that leads to a buffer overflow. The vulnerability is described as critical, with the exploit disclosed publicly. The available documents identify the affected product a...

CVE-2024-4508

Summary of CVE-2024-4508 (Ruijie RG-UAC) : A critical OS command injection vulnerability exists in Ruijie RG-UAC up to 20240428, affecting an unknown function in the file /view/IPV6/ipv6StaticRoute/static_route_edit_ipv6.php. Manipulating the parameters oldipmask, oldgateway, or olddevname can tr...

CVE-2024-4497

A vulnerability was found in Tenda i21 1.0.0.144656. It has been declared as critical. This vulnerability affects the function formexeCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2024-4495

CVE-2024-4495 affects Tenda i21 (firmware 1.0.0.14(4656)). The issue is in the function formWifiMacFilterGet where the index argument can be mishandled, causing a stack-based buffer overflow. Several connected sources confirm a remote-exploit capable scenario with this vulnerability, rated high/s...

CVE-2024-4493 Tenda i21 formSetAutoPing stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.144656. Affected is the function formSetAutoPing. The manipulation of the argument ping1/ping2 leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2023-27283

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...

CVE-2023-27283

Affected product: IBM Aspera Orchestrator 4.0.1. The issue allows a remote attacker to enumerate usernames due to observable response discrepancies during authentication, as documented in multiple sources (e.g., CNVD, Red Hat advisory, IBM X-Force references). Root cause and exact impact: observa...

CVE-2023-27283 IBM Aspera Orchestrator information disclosure

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...

Fedora 38 : httpd (2024-c2f6576348)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c2f6576348 advisory. This update includes httpd version 2.4.59, fixing various security issues and bugs. See https://downloads.apache.org/httpd/CHANGES2.4.59 for complet...

MasterParser - Powerful DFIR Tool Designed For Analyzing And Parsing Linux Logs

What is MasterParser ? MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifically designed to expedite the investigative process for security incidents on Linux systems, MasterParser...