232 matches found
CVE-2024-10913
creationtimestamp| type| source ---|---|--- 2024-11-20 13:59:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113515638616836767 2024-11-20 16:15:08+00:00| seen| https://t.me/cvedetector/11606...
CVE-2024-52429
creationtimestamp| type| source ---|---|--- 2024-11-18 14:25:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113504413363156016 2024-11-18 17:23:10+00:00| seen| https://t.me/cvedetector/11343 2025-01-06 20:20:45+00:00| seen|...
CVE-2024-8781
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
CVE-2024-8781
TR7 Application Security Platform (ASP) v1.4.25.188 contains an Improper Protection of Alternate Path vulnerability that enables Privilege Escalation and Execution with Unnecessary Privileges. Root cause: improper protection of an alternate path. Exploitation details are not provided in the docum...
CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
TR7 Application Security Platform 安全漏洞
TR7 Application Security Platform is an application from TR7, Inc. A security vulnerability exists in TR7 Application Security Platform version 1.4.25.188 that stems from improper protection of an alternate path vulnerability that allows elevation of privilege and privilege abuse...
CVE-2024-8781: Execution with Unnecessary Privileges
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
PT-2024-39247 · Unknown · Tr7 Application Security Platform
Name of the Vulnerable Software and Affected Versions: TR7 Application Security Platform ASP version 1.4.25.188 Description: The issue affects the TR7 Application Security Platform ASP due to an Improper Protection of Alternate Path vulnerability, allowing Privilege Escalation and Privilege Abuse...
The vulnerability of the software platform for managing security in industrial networks, MXSecurity, arises from the use of dangerous methods or functions, allowing attackers to enhance their privileges.
The vulnerability of the MXSecurity software platform for managing security in industrial networks is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-28052
creationtimestamp| type| source ---|---|--- 2024-10-30 15:52:12+00:00| seen| https://t.me/cvedetector/9436 2025-10-01 18:11:56+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:28+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...
Palo Alto Networks Cortex Xsoar 安全漏洞
Palo Alto Networks Cortex Xsoar is a Security Orchestration Automation and Response Soar platform from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex Xsoar that stems from an ActiveMQ integration issue that could result in configured ActiveMQ credentials bei...
Abusix Launches Guardian: Cutting-Edge Security Platform for Email and Network Providers
Boston, MA, 5th September 2024, CyberNewsWire...
The New Effective Way to Prevent Account Takeovers
Account takeover attacks have emerged as one of the most persistent and damaging threats to cloud-based SaaS environments. Yet despite significant investments in traditional security measures, many organizations continue to struggle with preventing these attacks. A new report, "Why Account Takeov...
How to Automate the Hardest Parts of Employee Offboarding
According to recent research on employee offboarding, 70% of IT professionals say they've experienced the negative effects of incomplete IT offboarding, whether in the form of a security incident tied to an account that wasn't deprovisioned, a surprise bill for resources that aren't in use anymor...
How to Cut Costs with a Browser Security Platform
Browser security is becoming increasingly popular, as organizations understand the need to protect at the point of risk - the browser. Network and endpoint solutions are limited in their ability to protect from web-borne threats like phishing websites or malicious browser extensions. They also do...
Enhancing Velociraptor with the Cado Security Platform
By: Nicholas Handy, Director of Technical Alliances & Partnerships at Cado Security Velociraptor is a robust open-source tool designed for collecting and querying forensic and incident response artifacts across various endpoints. This powerful tool allows incident responders to effortlessly gathe...
Report: The Dark Side of Phishing Protection
The transition to the cloud, poor password hygiene and the evolution in webpage technologies have all enabled the rise in phishing attacks. But despite sincere efforts by security stakeholders to mitigate them - through email protection, firewall rules and employee education - phishing attacks ar...
Noname Security Platform Updates: 3.30 Release
...
CVE-2024-31455 Minder GetRepositoryByName data leak
Minder by Stacklok is an open source software supply chain security platform. A refactoring in commit 5c381cf added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the SQL query for doing so was missing parenthesis, and would...