A vulnerability, which was classified as problematic, has been found in bit loader 10.0.3. This issue affects some unknown processing of the file index.js. The manipulation of the argument e leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
The identification of this vulnerability is CVE-2024-24293. The attack may be initiated remotely. There is no exploit available.
A vulnerability classified as problematic was found in blackprint engine 0.9.0. This vulnerability affects the function _utils.setDeepProperty of the file engine.min.js. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
This vulnerability was named CVE-2024-24294. The attack can be initiated remotely. There is no exploit available.
A vulnerability classified as critical has been found in Quanxun Huiju Network Technology IK-Q3000 3.7.10 on x64. This affects an unknown part of the component ICMP Handler. The manipulation leads to improper access controls.
This vulnerability is uni…
A vulnerability was found in Quanxun Huiju Network Technology IK-Q3000 3.7.10 on x64. It has been rated as problematic. Affected by this issue is some unknown functionality of the component TCP Connection Handler. The manipulation leads to denial of se…
A vulnerability was found in Asus ExpertWiFi, RT-AX55, RT-AX58U, RT-AC67U, RT-AC68R, RT-AC68U, RT-AX86 Series, RT-AC86U, RT-AX88U and RT-AX3000. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the compone…
A vulnerability was found in json-schema-ref-parser 11.0.0/11.1.0. It has been classified as problematic. Affected is the function bundle/parse/resolve/dereference of the component API Dev Tools. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
This vulnerability is traded as CVE-2024-29651. It is possible to launch the attack remotely. There is no exploit available.
This error appears when trying to run the exploit linux/http/php_imap_open_rce payload: cmd/unix/pingback_bind
creates the session, but it dates and this error appears
An Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS) has been attributed as behind destructive wiping attacks targeting Albania and Israel under the personas Homeland Justice and Karma, respectively.
Cybersecurity fi…
A vulnerability was found in SourceCodester Vehicle Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /newdriver.php of the component HTTP POST Request Handler. The manipulation of the argume…
I use Linux on my laptop and I do Full Disk Encryption with the LUKS keys enrolled into TPM2 against proper PCRs to make sure firmware, UEFI and Secure Boot setup are in a known-good state. Additionally, my TPM setup has a 6-digit PIN with…
