The vulnerability in Intel NUC’s built-in software is related to errors during the removal of special components, allowing attackers to gain increased privileges.

The vulnerability of Intel NUC’s built-in software is related to errors during the removal of special components. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

Monero: RPC service DOS

The RPC service running on port 18081 or 28081, 38081 was vulnerable to a denial-of-service attack due to a loop iterating until the maximum range of a 64-bit unsigned integer. The vulnerability was present in all versions after the commit b030f207517f59a5122409398549a02ac23829ae, up to and...

CVE-2023-5933 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests...

Squid Denial of Service Vulnerability (CNVD-2024-08086)

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A denial of service vulnerability exists in Squid versions prior to 6.6, which stems from an outdated pointer referenc...

BELL-CVE-2024-0727

Bulletin has no description...

BELL-CVE-2023-40550

Bulletin has no description...

BELL-CVE-2023-40549

Bulletin has no description...

BELL-CVE-2023-40551

Bulletin has no description...

The vulnerability of cloud software for creating and using Nextcloud Server’s data storage system, related to the unencrypted storage of critical information, allows attackers to compromise the passwords of arbitrary users.

The vulnerability of cloud software for creating and using Nextcloud Server storage involves the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose the passwords of arbitrary users...

The vulnerability of cloud software for creating and using Nextcloud Server’s data storage solution lies in the incorrect expiration time of user sessions, which allows attackers to intercept user sessions.

The vulnerability of cloud software for creating and using Nextcloud Server storage solutions is related to incorrect session duration. Exploiting this vulnerability can allow attackers to intercept user sessions...

GHSA-7G9J-G5JG-3VV3 Unauthenticated Nonce Increment in snow

Impact There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it...

MAL-2024-885 Malicious code in wlwz-2312-7904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baca6b336baaa73d4bb4e2e5bffb1ecc4447699637d6d7b60302bcd641132c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-328 Malicious code in wlwz-2312-1705 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a91f5415b99b3319f866bca1a90562b8bbc37d23f330a4e1e681e3803abec5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-852 Malicious code in wlwz-2312-7507 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d9294f70d449bd920d7147923a8647597c10d30f5c8e64fc260f827fe2a4430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-895 Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-704 Malicious code in wlwz-2312-5903 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0544440fe9942d1ce2fd62328be7709e71a852fcbc8bcea896fa1e318139c6d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-678 Malicious code in wlwz-2312-5604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6963caefff4a061651d4c8afe98aa2ecad2483accb3ff5b65aef1fdecfba5ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-604 Malicious code in wlwz-2312-4802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96e271afa550a130677affbf4460afe6380a6a7eebd04e245bd946811ae6c00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-632 Malicious code in wlwz-2312-5103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf9130e46e470d7b48e49bc9484c898a3ba384396cf0370e9de21be2cdb6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...