CVE-2023-37244

The CVE-2023-37244 entry concerns AutomationManager.AgentService.exe and describes a TOCTOU race condition that lets standard users create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp. This could enable an attacker to manipulate the process into performing arbitra...

Qualys Launches MSSP Portal to Empower Managed Security Service Providers

In the words of Sun Tzu, In the midst of chaos, there is also opportunity. This aptly captures the essence of todays cybersecurity landscape. Managed Security Service Providers MSSPs stand at the forefront, turning chaos into opportunity by securing digital assets across the entire infrastructure...

CVE-2024-24312

SQL injection vulnerability in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component...

CVE-2024-24313

An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...

CVE-2024-24312

SQL injection vulnerability in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component...

Vaales Technologies V_QRS SQL注入漏洞

Vaales Technologies VQRS is a digital business card solution from Vaales Technologies, India. A SQL injection vulnerability exists in Vaales Technologies VQRS version v.2024-01-17, which originates from a vulnerability that allows remote attackers to obtain sensitive information via the...

CVE-2024-24313

An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...

CVE-2024-24313

Vaales Technologies V_QRS v.2024-01-17 has a vulnerability in Models/FormModel.php and QRModel.php that allows remote attackers to obtain sensitive information. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (High). Public details in connected sources corrobo...

PT-2024-20354 · Vaales Technologies · V Qrs

Name of the Vulnerable Software and Affected Versions: Vaales Technologies V QRS version 2024-01-17 Description: The issue allows a remote attacker to obtain sensitive information via the Models/UserModel.php component. This is achieved through a SQL injection vulnerability. Recommendations: For...

CVE-2024-24312

SQL injection vulnerability in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component...

CVE-2024-24312

Summary : CVE-2024-24312 is a SQL injection vulnerability in Vaales Technologies’ V_QRS (version 2024-01-17) affecting the Models/UserModel.php component. The issue can allow a remote attacker to obtain sensitive information. Multiple connected sources corroborate the vulnerability details (produ...

CVE-2024-24313

An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...

PT-2024-20355 · Vaales Technologies · V Qrs

Name of the Vulnerable Software and Affected Versions: Vaales Technologies V QRS version 2024-01-17 Description: The issue allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component. Recommendations: For Vaales Technologies V QRS version...

Vaales Technologies V_QRS 安全漏洞

Vaales Technologies VQRS is a digital business card solution from Vaales Technologies, India. A security vulnerability exists in Vaales Technologies VQRS version v.2024-01-17, which stems from a vulnerability that allows remote attackers to obtain sensitive information via the Models/FormModel.ph...

Managed Detection and Response in 2023

Managed Detection and Response in 2023 PDF Alongside other security solutions, we provide Kaspersky Managed Detection and Response MDR to organizations worldwide, delivering expert monitoring and incident response 24/7. The task involves collecting telemetry for analysis by both machine-learning ...

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

The U.S. Federal Communications Commission FCC today levied fines totaling nearly $200 million against the four major carriers -- including AT&T, Sprint, T-Mobile and Verizon -- for illegally sharing access to customers location information without consent. The fines mark the culmination of a mor...

Huawei Technologies Ltd MindSpore suffers from a logic flaw vulnerability (CNVD-2024-24257)

MindSpore is a new open source deep learning training/inference framework for mobile, edge and cloud scenarios. Huawei Technologies Ltd MindSpore suffers from a logic flaw vulnerability that can be exploited by attackers to cause a denial of service...

HCL Technologies HCL Connections Interrupt Access Control Vulnerability

HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies. A security vulnerability exists in HCL Technologies HCL Connections versions 7.0 and 8.0, which can be exploited by attackers to obtain sensitive information...

EMQ Technologies NanoMQ 安全漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open sourced by EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version v.0.21.7, which stems from a buffer overflow vulnerability in the readbyte function...

HCL Technologies HCL Connections User Enumeration Vulnerability

HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies. A user enumeration vulnerability exists in HCL Technologies HCL Connections versions 7.0 and 8.0, which can be exploited by an attacker to determine if a user is valid, leading to a brute forc...