Aggregator

A vulnerability was found in MapPress Maps Plugin up to 2.88.4 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2023-4840. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Baker Hughes Bently Nevada 3500 5.05. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability was named CVE-2023-34437. The attack can be initiated remotely. There is no exploit available. It is recommended to change the configuration settings.

A vulnerability, which was classified as critical, has been found in Chris Richardson MapPress Maps Plugin up to 2.85.4 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. This vulnerability is handled as CVE-2023-26015. The attack can only be initiated within the local network. There is no exploit available.

A vulnerability classified as problematic was found in Piwigo up to 14.2.x. This vulnerability affects the function create_tag of the file admin/include/functions.php. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-28662. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE. It has been declared as critical. This vulnerability affects unknown code of the component Networking. The manipulation leads to improper authorization. This vulnerability was named CVE-2024-21012. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /model/get_events.php. The manipulation of the argument event_id leads to sql injection. This vulnerability is handled as CVE-2024-33403. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Mendelson AS4. Affected is an unknown function of the component XML Data Handler. The manipulation leads to deserialization. This vulnerability is traded as CVE-2024-39334. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in vditor up to 3.9.8 and classified as problematic. This vulnerability affects unknown code of the component Data Packet Handler. The manipulation leads to path traversal. This vulnerability was named CVE-2024-39150. The attack can only be done within the local network. There is no exploit available.

A vulnerability was found in HP Display Control. It has been classified as problematic. This affects an unknown part. The manipulation leads to preservation of permissions. This vulnerability is uniquely identified as CVE-2024-29080. It is possible to launch the attack on the local host. There is no exploit available.

Квантовая наука рисует картину невидимых миров, взаимодействующих с нами.

RipperSec Targeted the Website of RBNr Militaria

​Attackers now target a critical severity vulnerability with publicly available exploit code that affects multiple models of end-of-life D-Link network-attached storage (NAS) devices. [...]

A Threat Actor is Selling Access to Access Trader

A vulnerability was found in Linux Kernel up to 6.9-rc5. It has been rated as critical. Affected by this issue is the function ovs_ct_exit of the component openvswitch. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-27395. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

SYLHET GANG-SG Targeted the Website of Israel Visa

东芝于 1960 年创造出日本最早的彩色电视机，2018 年它将 REGZA 品牌的电视业务出售给了海信。如今在日本电视市场，今年前九个月海信占到了 40.4% 份额，位居首位，TCL 的

RipperSec Targeted the Website of Comune di Palermo

Последние штрихи перед запуском Artemis II.