4591 matches found
PT-2025-26181
Name of the Vulnerable Software and Affected Versions ClamAV versions 1.0.9 through 1.4.3 Description A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service DoS condition, or execute...
Beyondtrust Remote Support Detection
Binary data beyondtrustremotesupportdetect.nbin...
BeyondTrust Privileged Remote Access Detection
Binary data beyondtrustprivilegedremoteaccessdetect.nbin...
New HIPAA Rules Mandate 72-Hour Data Restoration and Annual Compliance Audits
The United States Department of Health and Human Services' HHS Office for Civil Rights OCR has proposed new cybersecurity requirements for healthcare organizations with an aim to safeguard patients' data against potential cyber attacks. The proposal, which seeks to modify the Health Insurance...
CVE-2024-56539
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexconfigscan Replace one-element array with a flexible-array member in struct mwifiexietypeswildcardssidparams to fix the following warning on a MT8173 Chromebook...
CVE-2024-56613 sched/numa: fix memory leak due to the overwritten vma->numab_state
In the Linux kernel, the following vulnerability has been resolved: sched/numa: fix memory leak due to the overwritten vma-numabstate Problem Description When running the hackbench program of LTP, the following memory leak is reported by kmemleak. /opt/ltp/testcases/bin/hackbench 20 thread 1000...
Exploit for Code Injection in Craftcms Craft_Cms
Before you run script again do fuser -k 6666/tcp...
Malicious code in secret-scanning-custom-notifications (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327294aa7aee3dce9cc1b90296b239e83b00f5589a3613f7261f268283a575aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Path Traversal in Grafana
Automated Exploit Tool for Grafana CVE-2021-43798 !Previewi...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-53055)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53055 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan...
Exploit for CVE-2024-4956
CVE-2024-4956 CVE-2024-4956 is a serious path traversal vulne...
Oracle Linux 9 : kernel (ELSA-2024-10939)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10939 advisory. - net/smc: fix illegal rmbdesc access in SMC-D connection dump Steve Best RHEL-65436 RHEL-27748 CVE-2024-26615 - netfilter: nftpayload: sanitize offse...
SUSE SLES15: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (SUSE-SU-2024:4118-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4118-1 advisory. - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level...
Schneider Electric Modicon
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
CVE-2024-45520
WithSecure Atlant formerly F-Secure Atlant 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file...
CVE-2024-45520
WithSecure Atlant formerly F-Secure Atlant 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file...
CVE-2024-45520
CVE-2024-45520 affects WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. The vulnerability allows a remote Denial of Service due to memory corruption while scanning PE32 files. The issue is documented with CVSSv3.1 base score 7.5 (HIGH), attack vector Network, no user interaction required, a...
CVE-2024-32965
CVE-2024-32965 concerns Lobe Chat (lobe-chat) before version 1.19.13, with an unauthenticated SSRF vulnerability. The issue allows constructing malicious requests that trigger SSRF to internal services, potentially leaking sensitive information. The weakness is tied to the proxy address and OpenA...
GHSA-2XCC-VM3F-M8RW @lobehub/chat Server Side Request Forgery vulnerability
Summary lobe-chat before 1.19.13 has an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. Details visit https://chat-preview.lobehub.com/ click settings - llm - openai fill the...