🚨 CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

🎖@cveNotify

🚨 CVE-2017-10955
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by default. When parsing the preScript parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM. Was ZDI-CAN-4697. NOTE: Dell EMC disputes that this is a vulnerability

🎖@cveNotify

🚨 CVE-2022-44036
In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's position is that this is "very obviously a feature not an issue and if you don't like that feature it is very obvious how to disable it."

🎖@cveNotify

🚨 CVE-2023-38947
An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.

🎖@cveNotify

🚨 CVE-2024-30219
Active debug code vulnerability exists in MZK-MF300N all firmware versions. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed.

🎖@cveNotify

🚨 CVE-2024-30220
Command injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port.

🎖@cveNotify

🚨 CVE-2024-31956
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length checking, which can result in an Out-of-Bounds Write.

🎖@cveNotify

🚨 CVE-2024-36499
Vulnerability of unauthorized screenshot capturing in the WMS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

🎖@cveNotify

🚨 CVE-2024-36500
Privilege escalation vulnerability in the AMS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

🎖@cveNotify

🚨 CVE-2024-36501
Memory management vulnerability in the boottime module
Impact: Successful exploitation of this vulnerability can affect integrity.

🎖@cveNotify

🚨 CVE-2024-37969
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37970
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37971
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37972
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37973
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37974
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-22442
The vulnerability could be remotely exploited to bypass authentication.

🎖@cveNotify

🚨 CVE-2024-33180
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.

🎖@cveNotify

🚨 CVE-2024-33182
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.

🎖@cveNotify

🚨 CVE-2024-35338
Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.

🎖@cveNotify

🚨 CVE-2024-40322
An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data

🎖@cveNotify