ALSA-2024:1576 Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 3.1. AlmaLinux-29052 Security Fixes: ruby/cgi-gem: HTTP response...

PT-2024-40683 · Libspdm · Libspdm

Name of the Vulnerable Software and Affected Versions: libspdm affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the libspdm copy mem function and the libspdm get response chunk send function. No information...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-Vulnerabity-Checker Verify that your XZ Utils ve...

CVE-2024-3041

Netentsec NS-ASG Application Security Gateway 6.3 has a SQL injection in /protocol/log/listloginfo.php. The vulnerability is triggered remotely via unsafe input handling in that PHP script, with public disclosure. Impact is described across sources as potentially affecting confidentiality, integr...

CVE-2024-3040

CVE-2024-3040 concerns Netentsec NS-ASG Application Security Gateway v6.3. The vulnerability affects the file path /admin/list_crl_conf, where manipulation of the CRLId parameter leads to an SQL injection. Exploitation can be performed remotely, and public disclosure of the exploit is noted. Seve...

CVE-2024-3024

CVE-2024-3024 affects appneta tcpreplay up to version 4.4.4. The vulnerability is a heap-based buffer overflow in get_layer4_v6 in tcpreplay/src/common/get.c, exploitable via local access. Multiple connected sources confirm the issue and reference a public exploit; internal details are not provid...

CVE-2024-3024

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclose...

CVE-2024-3011

CVE-2024-3011 affects Tenda FH1205 (version 2.0.0.7(775)). The vulnerability is in the function formQuickIndex of the file /goform/QuickIndex , where manipulating the PPPOEPassword parameter causes a stack-based buffer overflow . Exploitation can be performed remotely, and multiple sources note t...

Workout Journal App 1.0 Cross Site Scripting

Exploit Title: Workout Journal App 1.0 - Stored XSS Date: 12.01.2024 Exploit Author: MURAT CAGRI ALIS Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17088/workout-journal-app-using-php-and-mysql-source-code.html Version: 1.0 Tested on: Windows /...

CVE-2024-3006

CVE-2024-3006 affects Tenda FH1205 (firmware 2.0.0.7(775)). The vulnerability is a stack-based overflow in the fromSetRouteStatic function (/goform/fromRouteStatic) triggered via the entrys argument, with remote exploitation and public disclosures. Connected sources confirm the root cause (stack-...

CVE-2024-2994

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-2996

CVE-2024-2996 affects the Bdtask Multi-Store Inventory Management System (versions up to 20240320). The vulnerability lies in the Page Title Handler component, where manipulation can cause cross-site scripting (XSS) . It is exploitable remotely and, per disclosures, the exploit has been public. S...

CVE-2024-2993 Tenda FH1203 QuickIndex formQuickIndex stack-based overflow

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2993

CVE-2024-2993 pertains to Tenda FH1203 firmware (version 2.0.1.6). The vulnerability is in the function formQuickIndex of /goform/QuickIndex, where manipulation of the PPPOEPassword argument causes a stack-based buffer overflow. It is exploitable remotely, and public disclosures exist (VDB-258162...

CVE-2024-2990

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

CVE-2024-2992

CVE-2024-2992 affects Tenda FH1203 version 2.0.1.6. The vulnerability is in the formSetCfm function of /goform/setcfm, where improper validation of the funcpara1 argument causes a stack-based buffer overflow. This can allow remote exploitation; multiple sources indicate the exploit has been discl...

CVE-2024-2992 Tenda FH1203 setcfm formSetCfm stack-based overflow

A vulnerability was found in Tenda FH1203 2.0.1.6 and classified as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclose...

CVE-2024-2985

CVE-2024-2985 affects Tenda FH1202 on version 1.2.0.14(408). The vulnerability lies in the function formQuickIndex of /goform/QuickIndex, where manipulating the PPPOEPassword argument causes a stack-based buffer overflow. This enables remote initiation and, per sources, an exploit has been disclo...

CVE-2024-2983

Vulnerability overview (CVE-2024-2983) : Tenda FH1202 (version 1.2.0.14(408)) is affected by a stack-based buffer overflow in the function formSetClientState of /goform/SetClientState. Malicious manipulation of the arguments deviceId, limitSpeed, or limitSpeedUp can be exploited remotely, with th...

Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input...