CVE-2024-55211: Reliance on Cookies without Validation and Integrity Checking

An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie...

Think Router Tk-Rt-Wr135G 安全漏洞

Think Router Tk-Rt-Wr135G is a router from Think. A security vulnerability exists in the Think Router Tk-Rt-Wr135G version V3.0.2-X000, which originates from an authentication bypass that can be accomplished with a specially crafted cookie...

perl-Tk bug fix and enhancement update

An update is available for perl-Tk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

PT-2024-10774 · Epson +1 · Epson Products +1

Name of the Vulnerable Software and Affected Versions: Lush 2 versions through 2020-02-25 Tk-star nan versions affected versions not specified Epson products versions affected versions not specified One2Track versions affected versions not specified Brother printers versions affected versions not...

PT-2024-10737 · Alecto +5 · Alecto Ivm-100 +6

Name of the Vulnerable Software and Affected Versions: Alecto IVM-100 2019-11-12 Tk-star nan affected versions not specified Svakom Nan affected versions not specified Alecto nan affected versions not specified Loven nan affected versions not specified Sannce products affected versions not...

RHSA-2008:0136 Red Hat Security Advisory: tk security update

Bulletin has no description...

RHSA-2008:0135 Red Hat Security Advisory: tk security update

Bulletin has no description...

SUSE SLED15: libpython3_11-1_0 / libpython3_11-1_0-32bit / python311 / etc (SUSE-SU-2024:2414-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2414-1 advisory. - CVE-2024-4032: Rearranging definition of private v global IP. bsc1226448 Tenable has extracted the...

Oracle Linux 8 : python-pillow (ELSA-2024-4227)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4227 advisory. 5.1.1-21 - Security fix for CVE-2024-28219 Resolves: RHEL-31071 Tenable has extracted the preceding description block directly from the Oracle Linux security...

OPENSUSE-SU-2024:10484-1 perl-Tk-804.033-1.10 on GA media

These are all security issues fixed in the perl-Tk-804.033-1.10 package on the GA media of openSUSE Tumbleweed...

tk-dl.com Cross Site Scripting vulnerability OBB-3912310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE SLES15: libpython3_6m1_0 / python3 / python3-base / python3-curses / etc (SUSE-SU-2024:0850-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0850-1 advisory. - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory bsc1219666. Tenable has extracted the preceding description blo...

[SECURITY] Fedora 40 Update: bsh-2.1.0-12.fc40

BeanShell is a small, free, embeddable, Java source interpreter with object scripting language features, written in Java. BeanShell executes standard Java statements and expressions, in addition to obvious scripting commands and syntax. BeanShell supports scripted objects as simple method closure...

tk-servis.ru Cross Site Scripting vulnerability OBB-3839384

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tk-expert.de Improper Access Control vulnerability OBB-3820468

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tk-takkyu.com Improper Access Control vulnerability OBB-3813860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tk-vergleich.com Improper Access Control vulnerability OBB-3813861

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tk-brand.at Improper Access Control vulnerability OBB-3782037

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

How .tk Became a TLD for Scammers

Sad story of Tokelau, and how its top-level domain "became the unwitting host to the dark underworld by providing a never-ending supply of domain names that could be weaponized against internet users. Scammers began using .tk websites to do everything from harvesting passwords and payment...

tk-online-store.de Improper Access Control vulnerability OBB-3780316

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...