Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-23347)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which originates from an invalid memory access in the built-in analyzer, and can be exploited by an attacker to bypass security restrictions...

Huawei HarmonyOS and EMUI Alarm Clock Module Null Pointer Access Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A null pointer access vulnerability exists in the Huaw...

Google Android elevation of privilege vulnerability (CNVD-2024-27512)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in code in multiple locations. An attacker can exploit this vulnerability to cause an elevation of privilege...

RuvarOA txt_keyword Parameter SQL Injection Vulnerability

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which is caused by the lack of validation of the txtkeyword parameter of the getcompany.aspx file against externally entered SQL statements. An attacker can exploit this...

D-Link DIR-845L Cross-Site Scripting Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. A cross-site scripting vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which can be exploited by an attacker to execute script in the victim's web browser using a specially crafted URL...

IBM Cognos Controller SQL Injection Vulnerability

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. An SQL injection vulnerability exists in IBM Cognos...

Information leakage vulnerability in Tianrui Green Shield Approval System of Xiamen Tianrui Technology Co. Ltd (CNVD-2024-25622)

Xiamen Tianrui Technology Co., Ltd. is a provider of data security products and services. An information leakage vulnerability exists in the Tianrui Green Shield Approval System of Xiamen Tianrui Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Verizon’s 2024 DBIR Unpacked: From Ransomware Evolution to Supply Chain Vulnerabilities

As we delve into cybersecuritys complex and evolving landscape, the Verizon 2024 Data Breach Investigations Report DBIR offers crucial insights into the mechanisms and motives behind the latest wave of cyberattacks. Qualys is once again proud to contribute to the report, helping to dissect these...

Agent Tesla and Taskun Malware Targeting US Education and Govt Entities

By Deeba Ahmed Beware! Agent Tesla & Taskun Malware are targeting US Education & Gov. This cyberattack steals data & exploits vulnerabilities. Learn how to protect schools & government agencies from this double threat! This is a post from HackRead.com Read the original post: Agent Tesla and Tasku...

Mattermost Server Uncontrolled Resource Consumption Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. Mattermost Server suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to cause a denial of service by sending a large request path...

IBM Aspera Trust Management Issues Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. IBM Aspera Faspex has a trust management issue vulnerability that stems from improper encryption of certain data. An attacker could exploit the vulnerability ...

Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Easyappointments

CVE-2022-0482 Vulnerability Exploitation Introduction This...

PT-2024-4007

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Server versions 1.0.0 through 1.3.0 Description: The issue affects Apache HugeGraph-Server, allowing unauthenticated remote code execution and server takeover. This flaw can be exploited by attackers to bypass sandbox...

Google Chrome Data Validation Error Vulnerability (CNVD-2024-29288)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a data validation error vulnerability that can be exploited by attackers to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2024-29286)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

The vulnerability of the CMS system Netcat, related to the manipulation of inter-site requests, allows a hacker to create a new user with administrator privileges.

The vulnerability of the CMS system Netcat is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to create a new user with administrator privileges by sending a specially crafted request...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-17897)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-17895)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-17890)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Apache HTTP Server Response Splitting Vulnerability (CNVD-2024-36394)

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. Apache HTTP Server suffers from a response splitting vulnerability that can be exploited by an attacker to inject arbitrary HTTP...