CVE-2024-36375

In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed...

CVE-2024-36375

In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed...

CVE-2024-24304

In the module "Mailjet" mailjet from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical information without restriction...

PT-2024-20347 · Mailjet · Mailjet Module For Prestashop

Name of the Vulnerable Software and Affected Versions: Mailjet module for PrestaShop versions prior to 3.5.1 Description: A guest can download technical information without restriction in the Mailjet module for PrestaShop. Recommendations: For versions prior to 3.5.1, update to version 3.5.1 or...

CVE-2024-24304

In the module "Mailjet" mailjet from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical information without restriction...

CVE-2024-24304

The CVE-2024-24304 affects the Mailjet module for PrestaShop prior to version 3.5.1. A guest can download technical information without restriction due to the underlying design in this module, enabling exposure of internal details. The issue is documented across multiple sources (NVD/Red Hat/CVE ...

CVE-2023-27498

SAP Host Agent SAPOSCOL - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about...

Memory corruption

SAP Host Agent SAPOSCOL - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about...

CVE-2023-27498 Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL)

SAP Host Agent SAPOSCOL - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about...

CVE-2022-43872

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information e.g. event log entries about the FTM SWIFT system. IBM X-Force ID: 239708...

Authorization

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information e.g. event log entries about the FTM SWIFT system. IBM X-Force ID: 239708...

CVE-2022-43872

CVE-2022-43872 affects IBM Financial Transaction Manager for SWIFT Services 3.2.4. Affected component: authorization checks on certain HTTP requests, enabling access to unauthorized technical information (e.g., event log entries) about the FTM SWIFT system. Public references in the IBM bulletin n...

LastPass Suffers Another Security Breach; Exposed Some Customers Information

Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer information. "We recently detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its...

Hackers Had Access to LastPass's Development Systems for Four Days

Password management solution LastPass shared more details pertaining to the security incident last month, disclosing that the threat actor had access to its systems for a four-day period in August 2022. "There is no evidence of any threat actor activity beyond the established timeline," LastPass...

Hackers Breach LastPass Developer System to Steal Source Code

Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information. The security breach is said to have occurred two weeks ago, targeting its development environment. No customer data or encrypted passwords were accessed,...

biology.burke.washington.edu Cross Site Scripting vulnerability OBB-2522542

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-32711 Leak of information via Store-API

Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API should be affected by this change. We...

Fedora: Security Advisory for libmediainfo (FEDORA-2021-3b67623d93)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mediainfo Heap Buffer Overflow Vulnerability

MediaInfo is a free, cross-platform, open source program that displays technical information about media files as well as tagging information for many audio and video files. A heap buffer overflow vulnerability exists in versions of Mediainfo prior to 20.08. An attacker can exploit this...

CloudMe 1.11.2 SEH Buffer Overflow Exploit

import socket import sys target = "127.0.0.1" Written by : lutzenfried Clement Cruchet Exploiting CloudMe 1.11.2 Publisher : CloudMe AB Windows x64 10.0.18362 Build 18362 Buffer Overflow using SEH overwritten technic POP POP RET Exploit for CVE-2018-6892 Technical information used for exploit...