PT-2024-24943 · Unknown · Librespeed Speedtest

Name of the Vulnerable Software and Affected Versions: librespeed/speedtest versions 5.2.5 through 5.3.0 Description: The issue arises from missing neutralization of the ISP information in a speedtest result, leading to stored Cross-site scripting in the JSON API. The processedString field in the...

CVE-2024-4225 NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit RTU, by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting XS...

PT-2024-26517 · Tp Link · Tapo P125M +1

Name of the Vulnerable Software and Affected Versions: TP-Link Kasa KP125M version 1.0.0 Tapo P125M version 1.0.0 Build 220930 Rel.143947 Description: An Information Disclosure issue in the Telemetry component allows attackers to observe device state via observing network traffic. Recommendations...

PT-2024-29805 · Unknown · Netguardian Din Remote Telemetry Unit

Name of the Vulnerable Software and Affected Versions: NetGuardian DIN Remote Telemetry Unit RTU affected versions not specified Description: The issue concerns multiple security vulnerabilities in the web interface of the NetGuardian DIN Remote Telemetry Unit RTU. Attackers can exploit these...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400 Exploit for GlobalProtect CVE-2024-3400 This ex...

Important: Red Hat Security Advisory: Service Telemetry Framework 1.5.4 security update

An update is now available for Service Telemetry Framework 1.5.4 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices

Updated 2024-04-25 16:57 GMT with minor wording corrections regarding the targeting of other vendors. ArcaneDoor is a campaign that is the latest example of state-sponsored actors targeting perimeter network devices from multiple vendors. Coveted by these actors, perimeter network devices are the...

CVE-2024-28963

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...

CVE-2024-28963

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...

CVE-2024-28963

CVE-2024-28963 affects Telemetry Dashboard v1.0.0.7 on Dell ThinOS 2402. The issue is a local- access vulnerability that allows an unauthenticated user with local device access to read sensitive proxy settings due to a sensitive information disclosure in the Telemetry Dashboard. Exploitation deta...

CVE-2024-28963

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...

CVE-2024-28963

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS 2402 Telemetry Dashboard v1.0.0.7, which stems from the presence of a sensitive information disclosure vulnerability...

PT-2024-22646 · Dell · Telemetry Dashboard

Name of the Vulnerable Software and Affected Versions: Telemetry Dashboard version 1.0.0.7 for Dell ThinOS 2402 Description: The issue allows an unauthenticated user with local access to the device to exploit it and read sensitive proxy settings information. Recommendations: For Telemetry Dashboa...

Palo Alto Networks PAN-OS Unauthenticated Remote Code Execution Exploit

This Metasploit module exploits two vulnerabilities in Palo Alto Networks PAN-OS that allow an unauthenticated attacker to create arbitrarily named files and execute shell commands. Configuration requirements are PAN-OS with GlobalProtect Gateway or GlobalProtect Portal enabled and telemetry...

Palo Alto Networks PAN-OS Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Palo Alto Networks PAN-OS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits two vulnerabilities in Palo Alto Networ...

The vulnerability of the Forwarding Information Base Telemetry (fibtd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Forwarding Information Base Telemetry fibtd of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection...

CVE-2024-32028

OpenTelemetry dotnet is a dotnet telemetry framework. In affected versions of OpenTelemetry.Instrumentation.Http and OpenTelemetry.Instrumentation.AspNetCore the url.full writes attribute/tag on spans Activity when tracing is enabled for outgoing http requests and...

CVE-2024-32028 Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore

OpenTelemetry dotnet is a dotnet telemetry framework. In affected versions of OpenTelemetry.Instrumentation.Http and OpenTelemetry.Instrumentation.AspNetCore the url.full writes attribute/tag on spans Activity when tracing is enabled for outgoing http requests and...