5799 matches found
CVE-2024-43379 TruffleHog has a Blind SSRF in some Detectors
TruffleHog is a secrets scanning tool. Prior to v3.81.9, this vulnerability allows a malicious actor to craft data in a way that, when scanned by specific detectors, could trigger the detector to make an unauthorized request to an endpoint chosen by the attacker. For an exploit to be effective, t...
CVE-2024-43379
CVE-2024-43379 concerns TruffleHog, a secrets-scanning tool. According to the connected documents, the issue is a Blind SSRF vulnerability in some detectors prior to version 3.81.9 . The attack requires an attacker-crafted input that, when scanned, could cause an unauthenticated GET endpoint that...
OSGeo GeoServer Installed (Windows)
Binary data osgeogeoserverwininstalled.nbin...
Exploit for Incorrect Authorization in Apache Ofbiz
CVE-2024-38856 Apache Ofbiz RCE Scanner Description This...
Exploit for CVE-2023-4596
CVE-2024-6387-OpenSSH-Multi-Checker The CVE-2024-6387-checke...
CVE-2024-42125
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband We have some policy via BIOS to block uses of 6 GHz. In this case, 6 GHz sband will be NULL even if it is WiFi 7 chip. So, add NULL handling here to avoid...
The vulnerability in the GLPI system’s handling of requests and incidents, related to improper neutralization of special elements used in SQL commands, allows an attacker to carry out an attack based on time, using SQL injections in the REST API user_token.
The vulnerability of the GLPI system for handling requests and incidents is related to the improper neutralization of certain special elements. Exploiting this vulnerability allows a malicious actor to scan server ports or services, and to carry out attacks based on timing, using SQL injections i...
The vulnerability of the GLPI system’s handling of requests and incidents lies in the lack of measures taken to protect the SQL query structure used in SQL commands. This allows attackers to carry out SQL injection attacks.
The vulnerability of the GLPI system’s request and incident handling capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to scan server or service ports and perform SQL injection attacks...
Exploit for Improper Validation of Specified Type of Input in Servicenow
CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4...
OSGeo GeoTools Installed (Linux / Unix)
Binary data osgeogeotoolsnixinstalled.nbin...
The vulnerabilities of the content scanning and message filtering functions of the Cisco Secure Email Gateway allow attackers to enhance their privileges.
The vulnerability of content scanning and message filtering functions of the Cisco Secure Email Gateway relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, modify the device configuration,...
Your control tower to secure code across GitHub, GitLab, and Azure Repos
Secure your code and the entire development pipeline with the Wiz Security Graph, comprehensive configuration checks, and advanced code scanning...
CVE-2024-20401
A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file...
PT-2024-4846 · Cisco · Cisco Secure Email Gateway
Name of the Vulnerable Software and Affected Versions: Cisco Secure Email Gateway affected versions not specified Description: A vulnerability in the content scanning and message filtering features could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying...
Error: "Invalid disk file for [vDisk name]. Cannot add disk" when Importing vDisk
When importing vDisk, the following error appears: “Invalid disk file for vDisk name. Cannot add disk” After clicking OK, the following error appears: “The scan did not find any new vDisks”...
Exploit for Improper Validation of Specified Type of Input in Servicenow
CVE-2024-4879 Bulk scanning tool for ServiceNow CVE-2024-4879...
Schneider Electric Wiser Home Controller WHC-5918A
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...