Foxit PDF Reader and Editor Code Execution Vulnerability (CNVD-2024-24366)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Editor, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

ROS-20240408-24

A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection negotiation process and remove an arbitrary number of SSH service messages. during the connection negotiation process and cause an arbitrary number of SSH service...

PT-2024-23810 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YouDianCMS versions up to 9.5.12 Description: A critical issue was found in YouDianCMS, affecting the file AppLibActionAdminChannelAction.class.php. The manipulation of the file argument leads to unrestricted upload. This issue can be exploit...

Enter the substitute teacher

Welcome to this weeks threat source newsletter with Jon out, youve got me as your substitute teacher. Im taking you back to those halcyon days of youth and that moment when you found out that you had a sub that day, will I be the teacher that just rolls in the TV cart and delivers the single...

Denial of Service Vulnerability in Unisys Operating System of Unisys Software Technology Co.

Unisys Software Technology Co., Ltd. is a leading manufacturer of operating systems in China. A denial-of-service vulnerability exists in the Unisys operating system, which can be exploited by attackers to extract power and reboot the system...

Exploit for Incorrect Authorization in Polkit_Project Polkit

Description As part of my cybersecurity thesis I wanted to cr...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-21161)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-21158)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

TOTOLINK X5000R and A7000R Buffer Overflow Vulnerability (CNVD-2024-42443)

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in TOTOLINK X5000R and A7000R. An attacker can exploit this vulnerability to cause a denial of service D0S via a command field...

A patched Windows attack surface is still exploitable

On August 8, 2023, Microsoft finally released a kernel patch for a class of vulnerabilities affecting Microsoft Windows since 2015. The vulnerabilities lead to elevation of privilege EoP, which allows an account with user rights to gain SYSTEM privileges on a vulnerable host. The root cause of th...

Google Android elevation of privilege vulnerability (CNVD-2024-24398)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to incorrect handling of NULL responses in the session of AccountManagerService.java. An attacker can exploit the vulnerability to escalate privileges...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CNVD-2024-17973)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Mozilla Thunderbird Security Bypass Vulnerability (CNVD-2024-25572)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. Mozilla Thunderbird suffers from a security bypass vulnerability that is caused by the...

IBM Engineering Requirements Management DOORS Cross-Site Scripting Vulnerability

IBM Engineering Requirements Management DOORS is a requirements management tool. A cross-site scripting vulnerability exists in IBM Engineering Requirements Management DOORS, which can be exploited by an attacker to embed arbitrary JavaScript code in the Web UI...

Google Chrome Security Bypass Vulnerability (CNVD-2024-13762)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is due to an improper implementation in site isolation. An attacker can exploit this vulnerability to bypass security restrictions...

Denial of Service Vulnerability in Damon New Cloud Cache Database (DMCDM)

Damon New Cloud Cache Database DMCDM is a self-developed Key-Value database that is deeply compatible with the native Redis protocol. A denial of service vulnerability exists in Damon New Cloud Cache Database DMCDM, which can be exploited by attackers to cause a denial of service...

Microsoft Outlook Elevation of Privilege Vulnerability (CNVD-2024-34109)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to elevate privileges...

Autodesk AutoCAD Security Vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from the American company Autodesk. A security vulnerability exists in Autodesk AutoCAD. An attacker can exploit the vulnerability to execute code in the current process...

Oracle MySQL Denial of Service Vulnerability (CNVD-2024-09900)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A denial of service vulnerability exists in MySQL Server, which can be exploited by an attacker to cause an application to hang or crash frequently a...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...