[SECURITY] Fedora 40 Update: rust-tower-0.5.1-1.fc40

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 39 Update: rust-tower-0.5.1-1.fc39

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 39 Update: rust-tower0.4-0.4.13-1.fc39

Tower is a library of modular and reusable components for building robust clients and servers...

CVE-2024-49361 Potential Vulnerability in ACON Library: Improper Input Validation Leading to Malicious Code Execution

ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which could lead to arbitrary code execution if exploited. This issue could allow an attacker to submit...

CVE-2024-49361 Potential Vulnerability in ACON Library: Improper Input Validation Leading to Malicious Code Execution

ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which could lead to arbitrary code execution if exploited. This issue could allow an attacker to submit...

CVE-2024-49361

CVE-2024-49361 concerns the ACON library (Adaptive Correlation Optimization Network) and describes an input-validation vulnerability that could allow remote code execution when processing user-supplied data. Multiple sources corroborate that an attacker could submit malicious input to bypass vali...

PT-2024-33485 · Acon · Acon

Name of the Vulnerable Software and Affected Versions: ACON affected versions not specified Description: A potential issue has been identified in the input validation process of the ACON library, which could lead to arbitrary code execution if exploited. This could allow an attacker to submit...

The vulnerability of Power BI report servers, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Power BI report server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

CVE-2024-4211 Multiple missing permission checks

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation...

CVE-2024-4211 Multiple missing permission checks

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation...

Server-Side Request Forgery (SSRF)

Gradio is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to SSRF in the /queue/join endpoint, allowing attackers to exploit the asyncsaveurltocache function to make HTTP requests to user-controlled URLs. This can enable attackers to target internal servers, exfiltrate...

PaperCut NG < 23.0.9 Multiple Vulnerabilities

The version of PaperCut NG installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must...

PaperCut MF < 23.0.9 Multiple Vulnerabilities

The version of PaperCut MF installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must...

TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

New variants of an Android banking trojan called TrickMo have been found to harbor previously undocumented features to steal a device's unlock pattern or PIN. "This new addition enables the threat actor to operate on the device even while it is locked," Zimperium security researcher Aazim Yaswant...

The Samba AD DC administration tool when operating against a remote LDAP server will by default send new or reset passwords over a signed-only connection.

...

[SECURITY] Fedora 41 Update: rust-tower-0.5.1-1.fc41

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 41 Update: rust-tower-http0.5-0.5.2-1.fc41

Tower middleware and utilities for HTTP clients and servers...

SUSE CVE-2024-47166

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the /customcomponent endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the...

[SECURITY] Fedora 39 Update: rust-tower-http-0.5.2-6.fc39

Tower middleware and utilities for HTTP clients and servers...

Cisco Redfish API Command Injection (cisco-sa-cimc-redfish-cominj-sbkv5ZZ)

According to its self-reported version, the remote Cisco host is affected by a command injection vulnerability. - A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative...