RHEL 9 : toolbox (RHSA-2024:9135)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9135 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by AIX. AIX has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21145 DESCRIPTION: An unspecified vulnerability in Java SE related to the 2D component could allow a remote attacker to...

FBI: Spike in Hacked Police Emails, Fake Subpoenas

The Federal Bureau of Investigation FBI is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to...

CVE-2024-51713

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TRe Technology And Research S.r.l. HQ60 Fidelity Card hq60-fidelity-card allows Reflected XSS.This issue affects HQ60 Fidelity Card: from n/a through = 1.8...

CVE-2024-51713

CVE-2024-51713 is a reflected XSS vulnerability in HQ60 Fidelity Card (TRe Technology And Research S.R.L) plugin. Affected: HQ60 Fidelity Card from n/a to 1.8. Reported CVSS 3.1 (7.1, HIGH) with NETWORK attack vector, UI interaction required. No explicit mitigation or fix details are provided in ...

CVE-2024-51713 WordPress HQ60 Fidelity Card plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TRe Technology And Research S.r.l. HQ60 Fidelity Card hq60-fidelity-card allows Reflected XSS.This issue affects HQ60 Fidelity Card: from n/a through = 1.8...

AZL-53093 CVE-2024-50244 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in niclear Checking of NTFSFLAGSLOGREPLAYING added to prevent access to uninitialized bitmap during replay process...

CVE-2024-50244 fs/ntfs3: Additional check in ni_clear()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in niclear Checking of NTFSFLAGSLOGREPLAYING added to prevent access to uninitialized bitmap during replay process...

Binary Vulnerability in Chart Viewer Program of Unisys Software Technology Ltd.

Unisys Software Technology Co., Ltd. is a leading manufacturer of operating systems in China. A binary vulnerability exists in the Unisys Software Technologies Ltd. viewing program, which can be exploited by attackers to cause a denial of service...

Imperva: A Leader in WAAP

Imperva – a Thales company and leading provider of Web Application and API Protection WAAP solutions, is a force to be reckoned with in the cybersecurity landscape. Our comprehensive approach to security, encompassing database security, enterprise application security, bot management, DDoS...

Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities

Today I have great news to share: We've acquired AzireVPN, a privacy-focused VPN provider based in Sweden. I wanted to share with you our intentions behind this exciting step, and what this means for our existing users and the family of solutions they rely on to keep them private and secure...

Information Leakage Vulnerability in DSS System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. An information leakage vulnerability exists in the DSS system of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Limited (CNVD-2024-47773)

MetaCRM6 Customer Relationship Management System is an integrated, comprehensive, customer-centric business management suite. A SQL injection vulnerability exists in the MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Co. Ltd, which can be exploited by attacke...

Nanchang Zhuo Blue Technology Co., Ltd. blue sky collector has information leakage vulnerability

Nanchang Zhuolan Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. There is an information leakage vulnerability in the Blue Sky Collector of Nanchang Joran Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Security Bulletin: IBM Sterling Control Center is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2024

Summary IBM SDK, Java Technology Edition Quarterly CPU - Apr 2024 is affecting Sterling Control Center v6.2.1 and v6.3.1. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause no...

Security Bulletin: IBM Sterling Control Center is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Jul 2024 - Includes Oracle July 2024 CPU

Summary IBM SDK, Java Technology Edition Quarterly CPU - Jul 2024 is affecting Sterling Control Center v6.2.1 and v6.3.1. Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high...

SQL Injection Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the Smart Park Integrated Management Platform of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attacke...

Exploring Artificial Intelligence: Is AI Overhyped?

Dive into AI technologies like inference, deep learning, and generative models to learn how LLMs and AI are transforming cybersecurity and tech industries...

CVE-2024-10653

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server...

CVE-2024-10653 CHANGING Information Technology IDExpert - OS Command Injection

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server...