2127 matches found
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
Disclaimer: The vulnerabilities described in this article, alo...
Exploit for Path Traversal in Igniterealtime Openfire
CVE-2023-32315 - Ignite Realtime Openfire Path Traversal Vulnera...
Exploit for OS Command Injection in Apache Spark
CVE-2022-33891 - Apache Spark Command Injection Vulnerability...
Exploit for Argument Injection in Atlassian Bitbucket
CVE-2022-36804 - Atlassian Bitbucket Server and Data Center Comm...
cvex
cvex A curated repository dedicated t...
Fintech Bill Pay Platform “Willow Pays” Exposes Over 240,000 Records
Security researcher discovers a non-password-protected database containing over 240,000 records belonging to US-based FinTech bill payment platform Willow…...
Fake 7-Zip Exploit Code Traced to AI-Generated Misinterpretation
A recent claim that a critical zero-day vulnerability existed in the popular open-source file archiver 7-Zip has been met with skepticism from the software's creator and other security researchers...
FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits
Researchers at FortiGuard Labs have identified a prolific attacker group known as "EC2 Grouper" who frequently exploits compromised credentials using AWS tools...
SquareX Researchers Expose OAuth Attack on Chrome Extensions Days Before Major Breach
SquareX warns of OAuth attacks targeting Chrome extensions, exposing users to session hijacking and data theft. Secure your browser with proactive BDR solutions...
CVE-2024-41884 Null Pointer Dereference
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. If an attacker does not enter any value for a specific URL parameter, NULL pointer references will occur and the NVR will reboot. The manufacturer has released patch firmware for the flaw,...
EUVD-2024-38910
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. If an attacker does not enter any value for a specific URL parameter, NULL pointer references will occur and the NVR will reboot. The manufacturer has released patch firmware for the flaw,...
CVE-2024-41885
CVE-2024-41885 affects the NVR. The root cause is a hardcoded seed for the encryption key, enabling remote code execution when combined with required local access. Vendor has issued a patch firmware; see the manufacturer report for details and workarounds. Current metrics indicate local attack ve...
CVE-2024-41885 Hardcoding sensitive information
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. The seed string for the encrypt key was hardcoding. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds...
CVE-2024-41886 Improper Input Validation
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...
Exploit for Improper Authentication in Google Android
⚠️ Disclaimer: For Research and Educational Purposes Only...
CVE-2024-47544
creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...
CVE-2024-47602
creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...
CVE-2024-47601
creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...