Slándáil Research: Security Feeds

Feed

Category

Link

Vuldb Latest

advisory

CVE-2024-29969 | Brocade SANnav up to 2.3.0 Message Authentication Code inadequate encryption

Vuldb Latest

advisory

CVE-2024-29968 | Brocade SANnav up to 2.3.0 Disaster Recovery Mode information disclosure

Vuldb Latest

advisory

CVE-2024-2542 | Jotform Online Forms Plugin up to 1.3.1 on WordPress Shortcode cross site scripting

Vuldb Latest

advisory

CVE-2023-7067 | ShopLentor Plugin up to 2.8.1 on WordPress woolentor_template_store improper authorization

Vuldb Latest

advisory

CVE-2024-3312 | Easy Custom Auto Excerpt Plugin up to 2.4.12 on WordPress information disclosure

Vuldb Latest

advisory

CVE-2024-29217 | Apache Answer up to 1.2.x Personal Website cross site scripting

Vuldb Latest

advisory

CVE-2024-29204 | Ivanti Avalanche up to 6.4.2 WLAvalancheService heap-based overflow

Vuldb Latest

advisory

CVE-2024-2761 | Genesis Blocks Plugin up to 3.1.2 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-29967 | Brocade SANnav 2.3.0 Docker default permission

Vuldb Latest

advisory

CVE-2024-30938 | SEMCMS 4.8 SEMCMS_User.php ID sql injection

Vuldb Latest

advisory

CVE-2024-27984 | Ivanti Avalanche up to 6.4.2 Web denial of service

Vuldb Latest

advisory

CVE-2024-29959 | Brocade SANnav up to 2.3.0 Standby Node Support Save log file

Vuldb Latest

advisory

CVE-2024-27978 | Ivanti Avalanche up to 6.4.2 WLAvalancheService null pointer dereference

Vuldb Latest

advisory

CVE-2024-27976 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-27975 | Ivanti Avalanche up to 6.4.2 WLAvalancheService use after free

Vuldb Latest

advisory

CVE-2024-25000 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-24999 | Ivanti Avlanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-24998 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-24997 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-24996 | Ivanti Avalanche up to 6.4.2 WLInfoRailService heap-based overflow

Vuldb Latest

advisory

CVE-2024-24995 | Ivanti Avalanche up to 6.4.2 Web race condition

Vuldb Latest

advisory

CVE-2024-24994 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-24993 | Ivanti Avalanche up to 6.4.2 Web race condition

Vuldb Latest

advisory

CVE-2024-24992 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-24991 | Ivanti Avalanche up to 6.4.2 WLAvalancheService null pointer dereference

Vuldb Latest

advisory

CVE-2024-23535 | Ivanti Avalanche up to 6.4.2 Web path traversal

Vuldb Latest

advisory

CVE-2024-23534 | Ivanti Avalanche up to 6.4.2 Web unrestricted upload

Vuldb Latest

advisory

CVE-2024-22061 | Ivanti Avalanche up to 6.4.2 WLInfoRailService heap-based overflow

Vuldb Latest

advisory

CVE-2024-31750 | F-logic DataCube3 1.0 req_id sql injection

Vuldb Latest

advisory

CVE-2024-29965 | Brocade SANnav up to 2.3.0 SSH sensitive information

Vuldb Latest

advisory

CVE-2024-29962 | Brocade SANnav up to 2.3.0 default permission

Vuldb Latest

advisory

CVE-2024-32473 | Moby 26.0.0/26.0.1 IPv6 exposure of resource (GHSA-x84c-p2g9-rqv9)

Vuldb Latest

advisory

CVE-2024-29964 | Brocade SANnav up to 2.3.0 Docker Daemon information disclosure

Vuldb Latest

advisory

CVE-2024-29958 | Brocade SANnav up to 2.3.0a/2.3.0 Console log file

Vuldb Latest

advisory

CVE-2024-29957 | Brocade SANnav up to 2.3.0 Disaster Recovery Mode log file

Vuldb Latest

advisory

CVE-2024-27977 | Ivanti Avalanche up to 6.4.2 path traversal

Vuldb Latest

advisory

CVE-2024-29966 | Brocade SANnav up to 2.3.0 hard-coded credentials

Vuldb Latest

advisory

CVE-2024-23533 | Ivanti Avalanche up to 6.4.2 WLAvalancheService out-of-bounds

Vuldb Latest

advisory

CVE-2024-23531 | Ivanti Avalanche up to 6.4.2 WLInfoRailService denial of service

Vuldb Latest

advisory

CVE-2024-23530 | Ivanti Avalanche up to 6.4.2 WLAvalancheService out-of-bounds

Vuldb Latest

advisory

CVE-2024-29960 | Brocade SANnav up to 2.3.0 OVA Image hard-coded credentials

Vuldb Latest

advisory

CVE-2024-29961 | Brocade SANnav up to 2.3.0 Service information disclosure

Vuldb Latest

advisory

CVE-2024-23529 | Ivanti Avalanche up to 6.4.2 WLAvalancheService out-of-bounds

Vuldb Latest

advisory

CVE-2024-23528 | Ivanti Avalanche up to 6.4.2 WLAvalancheService out-of-bounds

Vuldb Latest

advisory

CVE-2024-23526 | Ivanti Avalanche up to 6.4.2 WLAvalancheService out-of-bounds

Vuldb Latest

advisory

CVE-2024-29963 | Brocade SANnav up to 2.3.0 TLS Connection hard-coded key

Vuldb Latest

advisory

CVE-2024-23532 | Ivanti Avalanche up to 6.4.2 WLAvalancheService out-of-bounds

Australia AusCERT

certs

Migration Toolkit for Containers (MTC) 1.8.3: CVSS (Max): 6.5

Australia AusCERT

certs

OpenShift Container Platform 4.14.21: CVSS (Max): 7.5

Australia AusCERT

certs

Migration Toolkit for Runtimes: CVSS (Max): 5.9

Palo Alto Advisories

vendor

CVE-2024-3400 PAN-OS: Arbitrary File Write Leads to OS Command Injection Vulnerability in GlobalProtect (Severity: CRITICAL)

Palo Alto Advisories

vendor

CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect (Severity: CRITICAL)

Australia AusCERT

certs

sssd: CVSS (Max): 7.1

Australia AusCERT

certs

Red Hat Service Interconnect 1.5.3: CVSS (Max): 7.5

Australia AusCERT

certs

OpenJDK 21.0.3: CVSS (Max): 3.7

Australia AusCERT

certs

java-17-openjdk: CVSS (Max): 3.7

Australia AusCERT

certs

OpenJDK 17.0.11: CVSS (Max): 3.7

Australia AusCERT

certs

OpenJDK 11.0.23: CVSS (Max): 3.7

Australia AusCERT

certs

OpenJDK 8: CVSS (Max): 3.7

Australia AusCERT

certs

Red Hat Advanced Cluster Management 2.8.6: CVSS (Max): 5.9

Australia AusCERT

certs

OpenShift Container Platform 4.14.19: CVSS (Max): 7.5

Australia AusCERT

certs

Red Hat build of MicroShift 4.14.19: CVSS (Max): 7.5

Bleeping Computer News

news

Fake cheat lures gamers into spreading infostealer malware

Australia AusCERT

certs

tzdata: CVSS (Max): None

Australia AusCERT

certs

GNU C Library: CVSS (Max): 8.8

Australia AusCERT

certs

pgadmin4: CVSS (Max): 8.8

Australia AusCERT

certs

Unitronics Vision Series PLCs: CVSS (Max): 7.5

Australia AusCERT

certs

kernel-rt: CVSS (Max): 6.7

Australia AusCERT

certs

kernel: CVSS (Max): 6.7

Australia AusCERT

certs

Red Hat Update Infrastructure (RHUI): CVSS (Max): 7.5

Australia AusCERT

certs

kernel: CVSS (Max): 7.1

Australia AusCERT

certs

rhc-worker-script: CVSS (Max): 5.9

Australia AusCERT

certs

mod_http2: CVSS (Max): 7.5

Bleeping Computer News

news

Frontier Communications shuts down systems after cyberattack

Vuldb Latest

advisory

CVE-2024-30107 | HCL Connections 7.0/8.0 information disclosure (KB0112489)

Vuldb Latest

advisory

CVE-2024-32477 | denoland Deno up to 1.42.1 libc::tcflush race condition (GHSA-95cj-3hr2-7j5j)

Vuldb Latest

advisory

CVE-2024-32474 | Sentry prior 24.4.1 log file

Vuldb Latest

advisory

CVE-2024-24910 | Check Point ZoneAlarm Extreme Security NextGen on Windows permission assignment

Vuldb Latest

advisory

CVE-2024-32462 | Flatpak argument injection (GHSA-phv6-cpc2-2fgj)

Vuldb Latest

advisory

CVE-2024-20380 | Cisco ClamAV 1.3 HTML Parser undefined behavior for input to api

Vuldb Latest

advisory

CVE-2024-23557 | HCL Connections 7.0/8.0 information disclosure (KB0112488)

Vuldb Latest

advisory

CVE-2024-29987 | Microsoft Edge prior 124.0.2478.51 information disclosure

Vuldb Latest

advisory

CVE-2024-29986 | Microsoft Edge prior 124.0.2478.51 on Android unknown vulnerability

Bleeping Computer News

news

840-bed hospital in France postpones procedures after cyberattack

Bleeping Computer News

news

FBI: Akira ransomware raked in $42 million from 250+ victims

Bleeping Computer News

news

Google ad impersonates Whales Market to push wallet drainer malware

Project Zero

blogs

The Windows Registry Adventure #1: Introduction and research results

Cisco Talos - Threat Research

blogs

For Cisco Insider Wouter Hindriks, curiosity and passion for problem solving are keys to success.

MITRE ATT&CK

blogs

ATT&CK 2024 Roadmap

Vuldb Latest

advisory

CVE-2024-1480 | Unitronics Vision 530 storing passwords in a recoverable format (icsa-24-109-01)

Vuldb Latest

advisory

CVE-2024-3818 | Essential Blocks Plugin up to 4.5.9 on WordPress Social Icons Block cross site scripting

Vuldb Latest

advisory

CVE-2024-32332 | Totolink N300RT 2.1.8-B20201030.1539 Wireless Page cross site scripting

Reddit /r/netsec/

news

On Windows Registry by researcher who got 50+ CVEs there

Vuldb Latest

advisory

CVE-2024-32335 | Totolink N300RT 2.1.8-B20201030.1539 Wireless Page cross site scripting

Vuldb Latest

advisory

CVE-2024-32334 | Totolink N300RT 2.1.8-B20201030.1539 Firewall Page cross site scripting

Vuldb Latest

advisory

CVE-2024-32326 | Totolink EX200 4.0.3c.7646_B20201211 setWiFiExtenderConfig key cross site scripting

Vuldb Latest

advisory

CVE-2024-32333 | Totolink N300RT 2.1.8-B20201030.1539 Firewall Page cross site scripting

Vuldb Latest

advisory

CVE-2024-32325 | Totolink EX200 4.0.3c.7646_B20201211 setWiFiExtenderConfig ssid cross site scripting

Vuldb Latest

advisory

CVE-2024-32327 | Totolink N300RT 2.1.8-B20201030.1539 Firewall Page cross site scripting

Vuldb Latest

advisory

CVE-2024-32470 | Tolgee 3.57.2/3.57.3 API Key Creation authorization (GHSA-pm57-hcm8-38gw)

Vuldb Latest

advisory

CVE-2024-2796 | Akana Community Manager Developer Portal server-side request forgery

Vuldb Latest

advisory

CVE-2024-32466 | Tolgee up to 3.57.1 translations authorization (GHSA-r95p-fqqv-fppc)

Vuldb Latest

advisory

CVE-2024-30257 | 1Panel up to 1.10.2 Password Verification information exposure (GHSA-6m9h-2pr2-9j8f)

Vuldb Latest

advisory

CVE-2024-30564 | inandrei-tatar nora-firebase-common up to 1.12.2 updateStateInternal updateState state issue

Bleeping Computer News

news

Microsoft Office LTSC 2024 preview available for Windows, Mac

Project Zero

blogs

The Windows Registry Adventure #2: A brief history of the feature

SecurityWeek News

news

SAP Applications Increasingly in Attacker Crosshairs, Report Shows

SecurityWeek News

news

Watch Now: Ransomware Resilience & Recovery Summit Sessions Now on Demand

Cisco Talos - Threat Research

blogs

Earth Day: How we’re helping our social and environmental systems heal and thrive

Packet Storm

advisory

Debian Security Advisory 5665-1

Packet Storm

advisory

Debian Security Advisory 5664-1

Packet Storm

advisory

Elber Wayber Analog/Digital Audio STL 4.00 Insecure Direct Object Reference

Packet Storm

advisory

Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass

Packet Storm

advisory

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Insecure Direct Object Reference

Packet Storm

advisory

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Authentication Bypass

Packet Storm

advisory

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Insecure Direct Object Reference

Packet Storm

advisory

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Authentication Bypass

Packet Storm

advisory

Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Insecure Direct Object Reference

Packet Storm

advisory

Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass

Packet Storm

advisory

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Insecure Direct Object Reference

Packet Storm

advisory

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass

Packet Storm

advisory

Ubuntu Security Notice USN-6737-1

Packet Storm

advisory

Clam AntiVirus Toolkit 1.3.1

Packet Storm

advisory

Ubuntu Security Notice USN-6729-2

Packet Storm

advisory

Red Hat Security Advisory 2024-1904-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1901-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1883-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1882-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1881-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1880-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1879-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1878-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1877-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1876-03

Packet Storm

advisory

Russia's Sandworm APT Linked To Attack On Texas Water Plant

Packet Storm

advisory

EU Tells Meta It Can't Paywall Privacy

Packet Storm

advisory

Kremlin-Backed Actors Spread Disinformation Ahead Of US Elections

Packet Storm

advisory

Lawmakers Are Kicking Warrantless Wiretapping Into Overdrive

Packet Storm

advisory

Five Eyes Agencies Release New AI Security Guidance

Packet Storm

advisory

Phishing Platform LabHost Shut Down By Law Enforcement

Vuldb Latest

advisory

CVE-2024-3560 | LearnPress Plugin up to 4.2.6.4 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-3731 | Customer Reviews for WooCommerce Plugin up to 5.47.0 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-3600 | Poll Maker Plugin up to 5.1.8 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-3598 | ElementsKit Pro Plugin up to 3.6.0 on WordPress ekit_btn_id cross site scripting

Vuldb Latest

advisory

CVE-2024-3615 | Media Library Folders Plugin up to 8.2.0 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-3601 | Poll Maker Plugin up to 5.1.8 on WordPress Email authorization

Vuldb Latest

advisory

CVE-2024-28185 | Judge0 up to 1.13.0 run_script symlink

Vuldb Latest

advisory

CVE-2024-29021 | Judge0 up to 1.13.0 API server-side request forgery

Vuldb Latest

advisory

CVE-2024-28189 | Judge0 up to 1.13.0 symlink

Vuldb Latest

advisory

CVE-2024-27306 | aio-libs aiohttp up to 3.9.3 Index Pages cross site scripting

Vuldb Latest

advisory

CVE-2024-32475 | Envoy Host Authority Header incorrect check of function return value

Bleeping Computer News

news

Cybercriminals pose as LastPass staff to hack password vaults

SecurityWeek News

news

Multi-Data Platform SIEM Anvilogic Raises $45 Million

The Hacker News

news

OfflRouter Malware Evades Detection in Ukraine for Almost a Decade

SecurityWeek News

news

United Nations Agency Investigating Ransomware Attack Involving Data Theft

Reddit /r/netsec/

news

Introducing Cloud Console Cartographer: An Open-Source Tool To Help Security Teams Easily Understand Log Events Generated by AWS Console Activity

Qualys Security Blog

blogs

TotalCloud Insights: Safeguarding Your Cloud Database from SQL Server Threats and Lateral Movement Risks

The Hacker News

news

FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor

SecurityWeek News

news

Five Eyes Agencies Release New AI Security Guidance

Cisco Talos - Threat Research

blogs

Cisco at Hannover Messe 2024: Know Before You Go

Cisco Talos - Threat Research

blogs

Innovation and Continuity: Cisco Meraki in the Education Sector

Vuldb Latest

advisory

CVE-2023-3758 | sssd GPO Policy race condition

Cisco Talos - Threat Research

blogs

Turning Cisco’s Tuition Reimbursement Green

Ubuntu Security Notices

vendor

USN-6737-1: GNU C Library vulnerability

SecurityWeek News

news

Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability

Vuldb Latest

advisory

CVE-2024-32554 | Knight Lab Timeline Plugin up to 3.9.3.4 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32565 | Appcheap App Builder Plugin up to 3.8.8 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-31229 | Really Simple Plugins Really Simple SSL Plugin up to 7.2.3 on WordPress server-side request forgery

Vuldb Latest

advisory

CVE-2024-32561 | Tagembed Plugin up to 4.7 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32556 | Nabil Lemsieh HurryTimer Plugin up to 2.9.2 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32559 | hwk-fr WP 404 Auto Redirect to Similar Post Plugin up to 1.0.4 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2023-47843 | Zachary Segal CataBlog Plugin up to 1.7.0 on WordPress path traversal

Vuldb Latest

advisory

CVE-2024-32600 | Averta Master Slider Plugin up to 3.9.5 on WordPress deserialization

Vuldb Latest

advisory

CVE-2024-32689 | GenialSouls WP Social Comments Plugin up to 1.7.3 on WordPress authorization

Vuldb Latest

advisory

CVE-2024-32560 | Sharabindu QR Code Composer Plugin up to 2.0.3 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32553 | looks_awesome Superfly Menu Plugin up to 5.0.25 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32552 | Taggbox Plugin up to 3.2 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32126 | Jeroen Peters Navigation menu as Dropdown Widget Plugin up to 1.3.4 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32686 | Inisev Backup Migration Plugin up to 1.4.3 on WordPress log file

Vuldb Latest

advisory

CVE-2023-49768 | FormAssembl WP-FormAssembly Plugin up to 2.0.10 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32581 | Lenderd Mortgage Calculators WP Plugin up to 1.56 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32562 | Viictory Media Z Y N I T H Plugin up to 7.4.9 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32571 | naa986 WP Stripe Checkout Plugin up to 1.2.2.41 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32558 | impleCode eCommerce Product Catalog Plugin up to 3.3.32 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2023-3675 | Secomea GateManager prior 11.0.623373051 Web GUI path traversal

SecurityWeek News

news

180k Impacted by Data Breach at Michigan Healthcare Organization

The Hacker News

news

Recover from Ransomware in 5 Minutes—We will Teach You How!

UK NCSC

certs

Cyber Assessment Framework 3.2

Vuldb Latest

advisory

CVE-2024-32567 | Designinvento DirectoryPress Plugin up to 3.6.7 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32570 | Archetyped Cornerstone Plugin up to 0.8.0 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32569 | Metaphor Creations Ditty Plugin up to 3.1.31 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32568 | Melapress WP 2FA Plugin up to 2.6.2 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32551 | Smartypants SP Project & Document Manager Plugin up to 4.71 on WordPress sql injection

Vuldb Latest

advisory

CVE-2024-32566 | WP Club Manager Plugin up to 2.2.11 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32564 | Post Grid Team by WPXPO PostX Plugin up to 4.0.1 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32563 | VikBooking Hotel Booking Engine & PMS Plugin up to 1.6.7 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32602 | OnTheGoSystems WooCommerce Multilingual & Multicurrency Plugin up to 5.3.3.1 on WordPress sql injection

Vuldb Latest

advisory

CVE-2024-26921 | Linux Kernel up to 46.1.84/6.6.25/6.8.4/6.9-rc1 ct_act.c ip_local_out Privilege Escalation

Reddit /r/netsec/

news

Breaking Custom Encryption Using Frida (Mobile Application Pentesting)

SecurityWeek News

news

Phishing Platform LabHost Shut Down by Law Enforcement

The Hacker News

news

How to Conduct Advanced Static Analysis in a Malware Sandbox

The Hacker News

news

New Android Trojan 'SoumniBot' Evades Detection with Clever Tricks

The Hacker News

news

Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide

Vuldb Latest

advisory

CVE-2024-32575 | Kraftplugins Mega Elements Plugin up to 1.1.9 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2023-41864 | Pepro Dev Group PeproDev CF7 Database Plugin up to 1.8.0 on WordPress cross-site request forgery

Vuldb Latest

advisory

CVE-2024-32580 | Averta Master Slider Plugin up to 3.9.8 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32579 | GloriaFood Restaurant Menu Plugin up to 2.4.1 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32578 | 10Web Slider Plugin up to 1.2.54 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32577 | Codeboxr Team CBX Bookmark & Favorite Plugin up to 1.7.20 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32576 | Booking Algorithms BA Book Everything Plugin up to 1.6.8 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32574 | Ashish Ajani WP Simple HTML Sitemap Plugin up to 2.8 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32573 | WP Lab WP-Lister Lite for eBay Plugin up to 3.5.11 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32572 | BdThemes Element Pack Elementor Addons Plugin up to 5.6.0 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32586 | Munir Kamal Gutenberg Block Editor Toolkit Plugin up to 1.40.4 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32601 | WP OnlineSupport Popup Anything Plugin up to 2.8 on WordPress authorization

Vuldb Latest

advisory

CVE-2024-32593 | WPBits WPBITS Addons for Elementor Page Builder Plugin up to 1.3.4.2 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32583 | 10Web Photo Gallery Plugin up to 1.8.21 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32591 | Daniele De Rosa Backend Designer Plugin up to 1.3 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32592 | VoidCoders Void Elementor WHMCS Elements for Elementor Page Builder Plugin cross site scripting

Vuldb Latest

advisory

CVE-2024-32588 | ThimPress LearnPress Export Import Plugin up to 4.0.3 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32582 | Bowo Debug Log Manager Plugin up to 2.3.1 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32598 | Booking Algorithms BA Book Everything Plugin up to 1.6.8 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32587 | EnvíaloSimple Plugin up to 2.2 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32596 | Eric-Oliver Mächler DSGVO Youtube Plugin up to 1.4.5 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32595 | Mat Bao Corp WP Helper Premium Plugin up to 4.5.x on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32594 | AttesaWP Attesa Extra Plugin up to 1.3.9 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32142 | Ovic Team Ovic Responsive WPBakery Plugin up to 1.3.0 on WordPress authorization

Vuldb Latest

advisory

CVE-2024-32590 | Webfood Kattene Plugin up to 1.7 on WordPress cross site scripting

Bleeping Computer News

news

LabHost phishing service with 40,000 domains disrupted, 37 arrested

Vuldb Latest

advisory

CVE-2023-49742 | Support Genix Plugin up to 1.2.3 on WordPress authorization

Vuldb Latest

advisory

CVE-2024-32604 | Plechev Andrey WP-Recall Plugin up to 16.26.5 on WordPress authorization

Vuldb Latest

advisory

CVE-2024-32603 | ThemeKraft WooBuddy Plugin up to 3.4.20 on WordPress deserialization

Vuldb Latest

advisory

CVE-2024-32584 | StandaloneTech TeraWallet Plugin up to 1.5.0 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-29001 | SolarWinds Platform up to 2024.1 SWQL sql injection

Vuldb Latest

advisory

CVE-2024-32599 | Deepak Anand WP Dummy Content Generator Plugin up to 3.2.1 on WordPress code injection

Vuldb Latest

advisory

CVE-2024-29003 | SolarWinds Platform up to 2024.1 Maps Section cross site scripting

Vuldb Latest

advisory

CVE-2024-28076 | SolarWinds Platform 2024.1 URL Parameter redirect

Vuldb Latest

advisory

CVE-2024-28076 | SolarWinds Platform up to 2024.1 URL Parameter redirect

Vuldb Latest

advisory

CVE-2024-32597 | Xylus Themes WordPress Importer Plugin up to 1.0.7 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2024-32585 | extendWP Import Content in WordPress & WooCommerce with Excel Plugin cross site scripting

Reddit /r/netsec/

news

Element Android CVE-2024-26131, CVE-2024-26132 - Never Take Intents From Strangers - Shielder

SecurityWeek News

news

Cisco Unveils AI-Native Enterprise Security Solution Hypershield

UK NCSC

certs

'NCSC Cyber Series' podcast now available on Spotify

Cisco Talos - Threat Research

blogs

Cisco Hypershield: Security reimagined — hyper-distributed security for the AI-scale data center

Cisco Talos - Threat Research

blogs

Cisco Hypershield: A New Era of Distributed, AI-Native Security

Cisco Talos - Threat Research

blogs

Cisco Hypershield: Reimagining Security

Vuldb Latest

advisory

CVE-2024-3948 | SourceCodester Home Clean Service System 1.0 Photo \admin\student.add.php unrestricted upload

The Hacker News

news

Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes

Vuldb Latest

advisory

CVE-2024-2729 | Otter Blocks Plugin up to 2.6.5 on WordPress cross site scripting

Vuldb Latest

advisory

CVE-2023-6892 | EAN for WooCommerce up to 4.9.2 on WordPress Shortcode alg_wc_ean_product_meta cross site scripting

Vuldb Latest

advisory

CVE-2023-6897 | EAN for WooCommerce Plugin up to 4.9.2 on WordPress resource injection

Vuldb Latest

advisory

CVE-2024-2833 | Jobs Plugin up to 2.7.5 on WordPress job-search cross site scripting

Vuldb Latest

advisory

CVE-2024-31869 | Apache Airflow up to 2.8.4 Configuration UI Page information disclosure

Vuldb Latest

advisory

CVE-2024-1429 | bdthemes Element Pack Elementor Addons Plugin up to 5.6.0 on WordPress Panel Slider Widget tab_link cross site scripting

Vuldb Latest

advisory

CVE-2024-1426 | bdthemes Element Pack Elementor Addons Plugin up to 5.6.0 on WordPress Price List Widget link cross site scripting

The Hacker News

news

Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor

Vuldb Latest

advisory

CVE-2024-29956 | Brocade SANnav up to 2.3.0 supportsave Log log file

Vuldb Latest

advisory

CVE-2023-4509 | Octopus Server prior 2023.4.296/2024.1.437/2024.2.101 API Key log file

Vuldb Latest

advisory

CVE-2024-29955 | Brocade SANnav up to 2.3.0 PostgreSQL log file

Australia AusCERT

certs

Red Hat build of Keycloak: CVSS (Max): 8.1

Australia AusCERT

certs

Red Hat build of Keycloak 22.0.10: CVSS (Max): 8.1

Australia AusCERT

certs

Red Hat Single Sign-On: CVSS (Max): 8.1

Australia AusCERT

certs

Red Hat Single Sign-On 7.6: CVSS (Max): 8.1

Australia AusCERT

certs

java-1.8.0-openjdk: CVSS (Max): 3.7

Australia AusCERT

certs

Cisco Integrated Management Controller (IMC): CVSS (Max): None

Australia AusCERT

certs

Cisco IOS and IOS XE Software: CVSS (Max): None

Australia AusCERT

certs

Cisco Integrated Management Controller (IMC): CVSS (Max): 8.7

Australia AusCERT

certs

Linux Kernel: CVSS (Max): 7.8*

Australia AusCERT

certs

Linux kernel (Xilinx ZynqMP): CVSS (Max): 7.8

Australia AusCERT

certs

Jenkins (core): CVSS (Max): 5.9

Australia AusCERT

certs

Xen: CVSS (Max): 4.7

Australia AusCERT

certs

firefox-esr: CVSS (Max): 7.5*

Vuldb Latest

advisory

CVE-2024-32743 | WonderCMS 3.4.3 Security Module SITE LANGUAGE CONFIG cross site scripting

Vuldb Latest

advisory

CVE-2024-32746 | WonderCMS 3.4.3 Menu Module MENU cross site scripting

Vuldb Latest

advisory

CVE-2024-32745 | WonderCMS 3.4.3 Current Page Module PAGE DESCRIPTION cross site scripting

Vuldb Latest

advisory

CVE-2024-32744 | WonderCMS 3.4.3 Current Page Module PAGE KEYWORDS cross site scripting

Vuldb Latest

advisory

CVE-2024-32345 | CMSimple 5.15 Language Section Configuration cross site scripting

Vuldb Latest

advisory

CVE-2024-32344 | CMSimple 5.15 Settings Menu Edit cross site scripting

Vuldb Latest

advisory

CVE-2024-32343 | Boid CMS 2.1.0 Content cross site scripting

Vuldb Latest

advisory

CVE-2024-32342 | Boid CMS 2.1.0 Permalink cross site scripting

Vuldb Latest

advisory

CVE-2024-32341 | WonderCMS 3.4.3 Home Page cross site scripting

Vuldb Latest

advisory

CVE-2024-32340 | WonderCMS 3.4.3 Menu Module WEBSITE TITLE cross site scripting

Vuldb Latest

advisory

CVE-2024-32339 | WonderCMS 3.4.3 cross site scripting

Vuldb Latest

advisory

CVE-2024-32338 | WonderCMS 3.4.3 Current Page Module PAGE TITLE cross site scripting

Vuldb Latest

advisory

CVE-2024-32337 | WonderCMS 3.4.3 ADMIN LOGIN URL cross site scripting

Vuldb Latest

advisory

CVE-2024-32472 | excalidraw up to 0.16.3/0.17.5 Web Embeddable cross site scripting

Vuldb Latest

advisory

CVE-2024-29952 | Brocade SANnav up to 2.3.0 command log file

Vuldb Latest

advisory

CVE-2024-21989 | NetApp ONTAP Select Deploy administration utility up to 9.14.1P2 privileges management (ntap-20240411-0001)

Vuldb Latest

advisory

CVE-2024-29951 | Brocade SANnav up to 2.3.0 Internal SSH Port inadequate encryption

Vuldb Latest

advisory

CVE-2024-21990 | NetApp ONTAP Select Deploy Administration Utility up to 9.14.1P2 hard-coded password (ntap-20240411-0002)

Vuldb Latest

advisory

CVE-2024-3817 | HashiCorp Shared library up to 1.7.2 argument injection

Bleeping Computer News

news

SoumniBot malware exploits Android bugs to evade detection

Bleeping Computer News

news

Hackers hijack OpenMetadata apps in Kubernetes cryptomining attacks

Bleeping Computer News

news

FIN7 targets American automaker’s IT staff in phishing attacks

VMWare Advisories

vendor

VMSA-2024-0008

Canada Cyber Centre

certs

Vulnerability impacting PAN-OS GlobalProtect Gateway - Update 2

Vuldb Latest

advisory

CVE-2024-31583 | PyTorch up to 2.1.x interpreter.cpp use after free

Vuldb Latest

advisory

CVE-2024-3323 | TIBCO JasperReports Server up to 8.0.3 cross site scripting

Vuldb Latest

advisory

CVE-2024-32162 | CMSeasy 7.7.7.9 denial of service

Vuldb Latest

advisory

CVE-2024-31040 | NanoMQ 0.21.7 Hexstreams mqtt_parser.c get_var_integer buffer overflow

Vuldb Latest

advisory

CVE-2024-31031 | libcoap 4.3.4 coap_pdu.c integer overflow

Vuldb Latest

advisory

CVE-2024-32163 | CMSeasy 7.7.7.9 Privilege Escalation

Vuldb Latest

advisory

CVE-2024-3900 | pdf up to 4.05 ActualText out-of-bounds write

Vuldb Latest

advisory

CVE-2024-31581 | FFmpeg 6.1 cbs_h266_syntax_template.c array index

Vuldb Latest

advisory

CVE-2024-31582 | FFmpeg 6.1 vf_codecview.c draw_block_rectangle buffer overflow

Vuldb Latest

advisory

CVE-2024-31585 | FFmpeg 5.1/6.1 avf_showspectrum.c denial of service

Vuldb Latest

advisory

CVE-2024-31041 | NanoMQ 0.21.7 mqtt_parser.c topic_filtern null pointer dereference

Vuldb Latest

advisory

CVE-2024-32161 | jizhiCMS 2.5 unrestricted upload

Reddit /r/netsec/

news

An Obscure Actions Workflow Vulnerability in Google’s Flank

Vuldb Latest

advisory

CVE-2024-30953 | Htmly 2.9.5 Menu Editor Module Link Name cross site scripting

SecurityWeek News

news

Kapeka: A New Backdoor in Sandworm’s Arsenal of Aggression

Vuldb Latest

advisory

CVE-2024-30951 | FUDforum 3.1.3 /adm/admsmiley.php chpos cross site scripting

Vuldb Latest

advisory

CVE-2024-29950 | Brocade SANnav up to 2.3.0 ssh-rsa Signature FileTransfer inadequate encryption

Vuldb Latest

advisory

CVE-2024-31580 | PyTorch up to 2.1.x vararg_functions.cpp denial of service

Vuldb Latest

advisory

CVE-2024-30950 | FUDforum 3.1.3 /adm/admsql.php statements cross site scripting

Vuldb Latest

advisory

CVE-2024-3914 | Google Chrome prior 124.0.6367.60 V8 use after free (ID 330759)

Vuldb Latest

advisory

CVE-2024-30986 | PHPGurukul edit-services-details.php cross site scripting

Vuldb Latest

advisory

CVE-2024-30989 | PHPGurukul Client Management System 1.1 /edit-client-details.php cname/comname/state/city cross site scripting

Vuldb Latest

advisory

CVE-2024-30988 | PHPGurukul Client Management System 1.1 Search Bar /search-invoices.php cross site scripting

Vuldb Latest

advisory

CVE-2024-30987 | PHPGurukul Client Management System 1.1 /bwdates-reports-ds.php todate cross site scripting

Vuldb Latest

advisory

CVE-2024-30982 | PHPGurukul Cyber Cafe Management System 1.0 /view-user-detail.php upid sql injection

Vuldb Latest

advisory

CVE-2024-2961 | GNU C Library up to 2.39 iconv out-of-bounds write

Vuldb Latest

advisory

CVE-2024-30990 | PHPGurukul Client Management System 1.1 Invoices Page searchdata sql injection

Vuldb Latest

advisory

CVE-2024-30985 | PHPGurukul Client Management System 1.1 BW Dates Reports Page fromdate sql injection

Bleeping Computer News

news

Moldovan charged for operating botnet used to push ransomware

McAfee Securing Tomorrow

blogs

Redline Stealer: A Novel Approach

Canada Cyber Centre

certs

Cisco security advisory (AV24-213)

Bleeping Computer News

news

Cisco discloses root escalation flaw with public exploit code

Vuldb Latest

advisory

CVE-2024-30983 | PHPGurukul Cyber Cafe Management System 1.0 edit-computer-detail.php compname sql injection

Belgium CERT.BE

certs

WARNING: CRITICAL VULNERABILITY IN ORACLE BI PUBLISHER V7.0.0.0.0/12.2.1.4.0 COULD LEAD TO APPLICATION TAKEOVER, PATCH IMMEDIATELY!

Vuldb Latest

advisory

CVE-2024-2201 | Xen Native Branch History memory corruption

Vuldb Latest

advisory

CVE-2024-28073 | SolarWinds Serv-U up to 15.4.1 path traversal

Vuldb Latest

advisory

CVE-2023-5398 | Honeywell Experion Server heap-based overflow

Vuldb Latest

advisory

CVE-2023-5400 | Honeywell Experion Server heap-based overflow

Belgium CERT.BE

certs

WARNING: CRITICAL VULNERABILITIES IN IVANTI AVALANCHE <6.4.3 COULD LEAD TO RCE, PATCH IMMEDIATELY!

Bleeping Computer News

news

Russian Sandworm hackers pose as hacktivists in water utility breaches

Vuldb Latest

advisory

CVE-2023-5405 | Honeywell Experion Server Message information disclosure

Vuldb Latest

advisory

CVE-2023-5407 | Honeywell C300 Message stack-based overflow

Vuldb Latest

advisory

CVE-2023-5397 | Honeywell Experion Server input validation

Vuldb Latest

advisory

CVE-2023-5396 | Honeywell Experion Server Message buffer access with incorrect length value

Vuldb Latest

advisory

CVE-2023-5395 | Honeywell Experion Server Hostname stack-based overflow

Vuldb Latest

advisory

CVE-2023-5404 | Honeywell Experion Server heap-based overflow

Vuldb Latest

advisory

CVE-2023-5403 | Honeywell Experion Server stack-based overflow

Vuldb Latest

advisory

CVE-2023-5401 | Honeywell Experion Server stack-based overflow

Vuldb Latest

advisory

CVE-2023-5406 | Honeywell Experion Server Message out-of-bounds write

Vuldb Latest

advisory

CVE-2024-30981 | PHPGurukul Cyber Cafe Management System 1.0 edit-computer-detail.php editid sql injection

Vuldb Latest

advisory

CVE-2024-3932 | Totara LMS 18.0.1 Build 20231128.01 cross-site request forgery

Vuldb Latest

advisory

CVE-2024-3931 | Totara LMS 18.0.1 Build 20231128.01 Profile admin/roles/check.php ID Number cross site scripting

Vuldb Latest

advisory

CVE-2024-3928 | Dromara open-capacity-platform 2.0.1 auth-server /actuator/heapdump information disclosure

Vuldb Latest

advisory

CVE-2024-32318 | Tenda AC500 2.0.1.9(1307) formSetVlanInfo vlan stack-based overflow

Vuldb Latest

advisory

CVE-2024-32316 | Tenda AC500 2.0.1.9(1307) fromDhcpListClient stack-based overflow

Vuldb Latest

advisory

CVE-2024-32317 | Tenda AC10 16.03.10.13/16.03.10.20 formWanParameterSetting adslPwd stack-based overflow

Vuldb Latest

advisory

CVE-2024-32314 | Tenda AC500 2.0.1.9(1307) formexeCommand cmdinput command injection

Vuldb Latest

advisory

CVE-2024-32305 | Tenda A18 15.03.05.05 fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-30979 | Cyber Cafe Management System 1.0 edit-computer-details.php compname cross site scripting

Vuldb Latest

advisory

CVE-2024-32320 | Tenda AC500 2.0.1.9(1307) formSetTimeZone timeZone stack-based overflow

Vuldb Latest

advisory

CVE-2024-32303 | Tenda AC15 15.03.05.18/15.03.05.19/15.03.20_multi fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2023-46060 | Tenda AC500 2.0.1.9 /goform/setVlanInfo port buffer overflow

Vuldb Latest

advisory

CVE-2024-26915 | Linux Kernel up to 5.15.151/6.1.81/6.6.17/6.7.5 amdgpu buffer overflow

Vuldb Latest

advisory

CVE-2024-32463 | phlex prior 1.10.1 cross site scripting (GHSA-g7xq-xv8c-h98c)

Vuldb Latest

advisory

CVE-2024-26920 | Linux Kernel up to 6.7.5 register_snapshot_trigger Privilege Escalation

Vuldb Latest

advisory

CVE-2024-30980 | PHPGurukul Cyber Cafe Management System 1.0 manage-computer.php Computer Location sql injection

Vuldb Latest

advisory

CVE-2024-20356 | Cisco Integrated Management Controller Web-based Management Interface os command injection (cisco-sa-cimc-cmd-inj-bLuPcb)

Vuldb Latest

advisory

CVE-2024-20295 | Cisco Integrated Management Controller CLI os command injection (cisco-sa-cimc-cmd-inj-mUx4c5AJ)

Vuldb Latest

advisory

CVE-2024-20373 | Cisco IOS/IOS XE SNMP Extended Named Access access control (cisco-sa-snmp-uwBXfqww)

Vuldb Latest

advisory

CVE-2024-26914 | Linux Kernel up to 6.7.5 drm mpc_combine array index (0bd8ef618a42/39079fe8e660)

Vuldb Latest

advisory

CVE-2024-26913 | Linux Kernel up to 6.7.5 display buffer overflow (cdbe0be8874c/faf51b201bc4)

Vuldb Latest

advisory

CVE-2024-26912 | Linux Kernel up to 6.7.5 nouveau nvkm_gsp_mem initialization (6190d4c08897/042b5f83841f)

Vuldb Latest

advisory

CVE-2023-52645 | Linux Kernel up to 5.15.149/6.1.79/6.6.17/6.7.5 mediatek race condition

Vuldb Latest

advisory

CVE-2024-26919 | Linux Kernel up to 6.1.78/6.6.17/6.7.5 USB ulpi_unregister_interface information disclosure

Vuldb Latest

advisory

CVE-2024-26918 | Linux Kernel up to 6.6.17/6.7.5 NVMe Endpoint pci_pme_wakeup state issue (63b1a3d9dd3b/a4f12e5cbac2/41044d536068)

Vuldb Latest

advisory

CVE-2024-26917 | Linux Kernel up to 6.7.5 on FCoE scsi deadlock

Vuldb Latest

advisory

CVE-2024-26916 | Linux Kernel up to 5.15.148/6.1.78/6.6/6.6.17/6.7.5 drm deadlock

Vuldb Latest

advisory

CVE-2024-26911 | Linux Kernel up to 6.7.5 drm alloc_range Privilege Escalation (4b59c3fada06/8746c6c9dfa3)

Vuldb Latest

advisory

CVE-2024-26910 | Linux Kernel up to 6.7.5 Netfilter synchronize_rcu race condition

US-CERT Alerts

certs

#StopRansomware: Akira Ransomware

Microsoft Security Blog

blogs

Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters

Packet Storm

advisory

Palo Alto OS Command Injection

Packet Storm

advisory

Palo Alto OS Command Injection Proof Of Concept

Cisco Talos - Threat Research

blogs

The network effect: The secret weapon for smart manufacturing

Packet Storm

advisory

pgAdmin 8.3 Remote Code Execution

Packet Storm

advisory

Debian Security Advisory 5655-2

Packet Storm

advisory

Debian Security Advisory 5662-1

SpecterOps Team Blog

blogs

LSA Whisperer

Packet Storm

advisory

Ubuntu Security Notice USN-6726-3

Packet Storm

advisory

Ubuntu Security Notice USN-6726-2

Packet Storm

advisory

Ubuntu Security Notice USN-6725-2

Packet Storm

advisory

Ubuntu Security Notice USN-6724-2

Packet Storm

advisory

Red Hat Security Advisory 2024-1868-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1865-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1859-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1856-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1846-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1841-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1840-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1836-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1835-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1834-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1833-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1832-03

Packet Storm

advisory

Red Hat Security Advisory 2024-1770-03

Packet Storm

advisory

Scammers Offer Cash To Phone Carrier Staff To Swap SIM Cards

Packet Storm

advisory

Ivanti Patches 27 Vulns In Avalanche MDM Product

Packet Storm

advisory

Attackers Are Pummeling Networks Around The World With Millions Of Login Attempts

Packet Storm

advisory

Recent OT And Espionage Attacks Linked To Russia's Sandworm, Now Named APT44

Packet Storm

advisory

OpenAI's ChatGPT Can Exploit Real Vulnerabilities By Reading Advisories

Vuldb Latest

advisory

CVE-2024-31463 | metal3-io ironic-image up to 24.1.0 authentication bypass

Vuldb Latest

advisory

CVE-2024-30253 | solana-labs solana-web3.js resource consumption (GHSA-8m45-2rjm-j347)

Vuldb Latest

advisory

CVE-2024-3849 | destiny.gg Click to Chat Plugin up to 3.35 on WordPress file inclusion

Vuldb Latest

advisory

CVE-2024-3825 | BlazeMeter Plugin up to 4.21 on Jenkins cross-site request forgery

Vuldb Latest

advisory

CVE-2024-32285 | Tenda W30E 1.0.1.25(633) formaddUserName password stack-based overflow

Vuldb Latest

advisory

CVE-2024-32307 | Tenda FH1205 2.0.0.7(775) fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-30952 | PESCMS-TEAM 2.3.6 domain cross site scripting

Vuldb Latest

advisory

CVE-2024-32287 | Tenda W30E 1.0.1.25(633) fromqossetting qos stack-based overflow

Vuldb Latest

advisory

CVE-2024-32286 | Tenda W30E 1.0.1.25(633) fromVirtualSer page stack-based overflow

Vuldb Latest

advisory

CVE-2024-32292 | Tenda W30E 1.0.1.25(633) formexeCommand cmdinput command injection

Vuldb Latest

advisory

CVE-2024-32290 | Tenda W30E 1.0.1.25(633) fromAddressNat page stack-based overflow

Vuldb Latest

advisory

CVE-2024-32288 | Tenda W30E 1.0.1.25(633) fromwebExcptypemanFilter page stack-based overflow

Vuldb Latest

advisory

CVE-2024-32293 | Tenda W30E 1.0.1.25(633) fromDhcpListClient page stack-based overflow

Vuldb Latest

advisory

CVE-2024-32311 | Tenda FH1203 2.0.1.6 formWanParameterSetting adslPwd stack-based overflow

Vuldb Latest

advisory

CVE-2024-32299 | Tenda FH1203 2.0.1.6 fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-29035 | Umbraco CMS up to 13.1.0 Webhooks Log server-side request forgery

Ubuntu Security Notices

vendor

USN-6729-2: Apache HTTP Server vulnerabilities

Vuldb Latest

advisory

CVE-2024-32306 | Tenda AC10U 15.03.06.49 fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-32283 | Tenda FH1203 2.0.1.6 formexeCommand cmdinput command injection

Vuldb Latest

advisory

CVE-2024-32301 | Tenda AC7 15.03.06.44 fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-32281 | Tenda AC7 15.03.06.44 formexeCommand cmdinput command injection

SecurityWeek News

news

Miggo Security Gets $7.5 Million Seed Funding to Build ADR Technology

Qualys Security Blog

blogs

Oracle Patch Update, April 2024 Security Update Review

Vuldb Latest

advisory

CVE-2024-32315 | Tenda FH1202 1.2.0.14(408) formWanParameterSetting adslPwd stack-based overflow

Vuldb Latest

advisory

CVE-2024-32302 | Tenda FH1202 1.2.0.14(408) fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-32282 | Tenda FH1202 1.2.0.14(408) formexeCommand cmdinput command injection

Vuldb Latest

advisory

CVE-2024-32312 | Tenda F1203 2.0.1.6 formWanParameterSetting adslPwd stack-based overflow

Vuldb Latest

advisory

CVE-2024-32310 | Tenda F1203 2.0.1.6 fromWizardHandle PPW stack-based overflow

Vuldb Latest

advisory

CVE-2024-32313 | Tenda FH1205 2.0.0.7(775) formWanParameterSetting adslPwd stack-based overflow

Vuldb Latest

advisory

CVE-2024-32291 | Tenda W30E 1.0.1.25(633) fromNatlimit page stack-based overflow

Vuldb Latest

advisory

CVE-2024-2419 | Keycloak redirect_uri

Vuldb Latest

advisory

CVE-2023-45744 | Peplink Smart Reader 1.2.0 Web Interface upload_config.cgi access control (TALOS-2023-1866)

Vuldb Latest

advisory

CVE-2023-39367 | Peplink Smart Reader 1.2.0 Web Interface mac2name os command injection (TALOS-2023-1867)

Vuldb Latest

advisory

CVE-2024-31578 | FFmpeg 6.1.1 av_hwframe_ctx_init use after free

Vuldb Latest

advisory

CVE-2023-45209 | Peplink Smart Reader 1.2.0 Web Interface download_config.cgi information disclosure (TALOS-2023-1865)

Vuldb Latest

advisory

CVE-2023-43491 | Peplink Smart Reader 1.2.0 Web Interface /cgi-bin/debug_dump.cgi information disclosure (TALOS-2023-1863)

Vuldb Latest

advisory

CVE-2023-40146 | Peplink Smart Reader 1.2.0 /bin/login command injection (TALOS-2023-1868)

SecurityWeek News

news

Armis Acquires Silk Security for $150 Million

Bleeping Computer News

news

Dark Web Monitoring: What's the Value?

Canada Cyber Centre

certs

Google Chrome security advisory (AV24-212)

McAfee Securing Tomorrow

blogs

How to Protect Yourself Against AI Voice Cloning Attacks

The Hacker News

news

Russian APT Deploys New 'Kapeka' Backdoor in Eastern European Attacks

Ubuntu Security Notices

vendor

USN-6726-3: Linux kernel (Xilinx ZynqMP) vulnerabilities

Bleeping Computer News

news

Multiple botnets exploiting one-year-old TP-Link flaw to hack routers

SecurityWeek News

news

Cisco: Multiple VPN, SSH Services Targeted in Mass Brute-Force Attacks

SecurityWeek News

news

Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product

Bleeping Computer News

news

Microsoft: New Copilot app added by Edge doesn’t collect data

Bleeping Computer News

news

Microsoft: Copilot ‘app’ on Windows Server mistakenly added by Edge

Canada Cyber Centre

certs

Atlassian security advisory (AV24-211)

SecurityWeek News

news

Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities

Cisco Talos - Threat Research

blogs

Supercharging Cisco XDR with AI and Identity Intelligence at RSAC 2024

Canada Cyber Centre

certs

Oracle security advisory – April 2024 quarterly rollup (AV24-210)

Jenkins advisories

vendor

Jenkins Security Advisory 2024-04-17

SecurityWeek News

news

Recent OT and Espionage Attacks Linked to Russia’s Sandworm, Now Named APT44

Vuldb Latest

advisory

CVE-2024-26906 | Linux Kernel up to 5.10.213/5.15.152/6.1.82/6.6.22/6.7.10 copy_from_kernel_nofault memory corruption

Vuldb Latest

advisory

CVE-2024-26903 | Linux Kernel up to 6.7.10 rfcomm null pointer dereference

Vuldb Latest

advisory

CVE-2024-26905 | Linux Kernel up to 6.1.82/6.6.22/6.7.10 btrfs space_info.c need_preemptive_reclaim race condition

Vuldb Latest

advisory

CVE-2024-26904 | Linux Kernel up to 5.4.272/6.1.82/6.6.22/6.7.10 btrfs_use_block_rsv race condition

Vuldb Latest

advisory

CVE-2024-26907 | Linux Kernel up to 5.10.213/5.15.152/6.1.82/6.6.22/6.7.10 mlx5 Privilege Escalation

Vuldb Latest

advisory

CVE-2024-26909 | Linux Kernel up to 6.6.22/6.7.10 qcom pmic_glink_altmode null pointer dereference (2bbd65c6ca56/ef45aa2841e1/b979f2d50a09)

Vuldb Latest

advisory

CVE-2024-26908 | Linux Kernel up to 6.7.10 xen smp.c kasprintf null pointer dereference

Vuldb Latest

advisory

CVE-2024-26899 | Linux Kernel up to 6.7.10/6.8.1 block bd_link_disk_holder race condition (1e5c5b0abaee/5a87c1f7993b/03f12122b20b)

Vuldb Latest

advisory

CVE-2024-26901 | Linux Kernel up to 6.8.1 instrumented.h do_sys_name_to_handle information disclosure

Vuldb Latest

advisory

CVE-2024-26900 | Linux Kernel up to 6.7.10/6.8.1 kobject_add memory leak (6d32c832a885/4c1021ce46fc/6cf350658736)

Vuldb Latest

advisory

CVE-2024-26896 | Linux Kernel up to 6.1.82/6.6.22/6.7.10/6.8.1 wifi wfx_set_mfp_ap memory leak

Vuldb Latest

advisory

CVE-2024-26895 | Linux Kernel up to 6.8.1 wilc1000 wilc_netdev_cleanup use after free

Vuldb Latest

advisory

CVE-2024-26894 | Linux Kernel up to 6.8.1 processor_idle acpi_processor_power_exit memory leak

Vuldb Latest

advisory

CVE-2024-26893 | Linux Kernel up to 6.1.82/6.6.22/6.7.10/6.8.1 arm_scmi chan_free null pointer dereference

Vuldb Latest

advisory

CVE-2024-26897 | Linux Kernel up to 6.8.1 wifi ath9k_wmi_event_tasklet null pointer dereference

Vuldb Latest

advisory

CVE-2024-26902 | Linux Kernel up to 6.6.22/6.7.10 RISCV null pointer dereference (3ede8e94de6b/9f599ba3b9cc/34b567868777)

Vuldb Latest

advisory

CVE-2024-26898 | Linux Kernel up to 6.8.1 aoecmd_cfg_pkts use after free

Vuldb Latest

advisory

CVE-2024-26888 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 Bluetooth memory leak

Vuldb Latest

advisory

CVE-2024-26889 | Linux Kernel up to 6.8.1 hci_core buffer overflow

Vuldb Latest

advisory

CVE-2024-26887 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 Bluetooth memory leak

Vuldb Latest

advisory

CVE-2024-26886 | Linux Kernel up to 6.8.1 af_bluetooth deadlock

Vuldb Latest

advisory

CVE-2024-26884 | Linux Kernel up to 6.8.1 bpf roundup_pow_of_two buffer overflow

Vuldb Latest

advisory

CVE-2024-26885 | Linux Kernel up to 6.8.1 max_entries buffer overflow

Vuldb Latest

advisory

CVE-2024-26883 | Linux Kernel up to 6.8.1 bpf roundup_pow_of_two buffer overflow

Vuldb Latest

advisory

CVE-2024-26892 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 mt7921e free_irq use after free

Vuldb Latest

advisory

CVE-2024-26891 | Linux Kernel up to 6.8.1 iommu pciehp_ist denial of service

Vuldb Latest

advisory

CVE-2024-26890 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 Bluetooth btrealtek_data initialization

Vuldb Latest

advisory

CVE-2024-26876 | Linux Kernel up to 6.7.10/6.8.1 bridge adv7511_probe uninitialized pointer (955c12529306/28a94271bd50/aeedaee5ef54)

Vuldb Latest

advisory

CVE-2024-26874 | Linux Kernel up to 6.8.1 mediatek mtk_drm_crtc_finish_page_flip pending_needs_vblank null pointer dereference

Vuldb Latest

advisory

CVE-2024-26879 | Linux Kernel up to 5.15.152/6.1.82/6.6.22/6.7.10/6.8.1 meson axg_clk_regmaps null pointer dereference

Vuldb Latest

advisory

CVE-2024-26882 | Linux Kernel up to 6.8.1 net include/net/inet_ecn.h ip_tunnel_rcv uninitialized variable

Vuldb Latest

advisory

CVE-2024-26880 | Linux Kernel up to 6.8.1 dm lib/list_debug.c resume denial of service

Vuldb Latest

advisory

CVE-2024-26881 | Linux Kernel up to 5.15.152/6.1.82/6.6.22/6.7.10/6.8.1 hns3 null pointer dereference

Vuldb Latest

advisory

CVE-2024-26878 | Linux Kernel up to 6.8.1 quota dquot_free_inode null pointer dereference

Vuldb Latest

advisory

CVE-2024-26877 | Linux Kernel up to 6.8.1 crypto/crypto_engine.c crypto_finalize_request state issue

Vuldb Latest

advisory

CVE-2024-26875 | Linux Kernel up to 6.8.1 lib/dump_stack.c pvr2_context_disconnect use after free

Vuldb Latest

advisory

CVE-2024-26868 | Linux Kernel up to 6.1.82/6.6.22/6.7.10/6.8.1 nfs4_ff_layout_prepare_ds null pointer dereference

Vuldb Latest

advisory

CVE-2023-51500 | Undsgn Uncode Core Plugin up to 2.8.8 on WordPress authorization

Vuldb Latest

advisory

CVE-2024-26861 | Linux Kernel up to 6.8.1 wireguard information disclosure

Vuldb Latest

advisory

CVE-2024-26866 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 lpspi use after free