🚨 CVE-2024-30219
Active debug code vulnerability exists in MZK-MF300N all firmware versions. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed.

🎖@cveNotify

🚨 CVE-2024-30220
Command injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port.

🎖@cveNotify

🚨 CVE-2024-31956
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length checking, which can result in an Out-of-Bounds Write.

🎖@cveNotify

🚨 CVE-2024-36499
Vulnerability of unauthorized screenshot capturing in the WMS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

🎖@cveNotify

🚨 CVE-2024-36500
Privilege escalation vulnerability in the AMS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

🎖@cveNotify

🚨 CVE-2024-36501
Memory management vulnerability in the boottime module
Impact: Successful exploitation of this vulnerability can affect integrity.

🎖@cveNotify

🚨 CVE-2024-37969
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37970
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37971
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37972
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37973
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37974
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-22442
The vulnerability could be remotely exploited to bypass authentication.

🎖@cveNotify

🚨 CVE-2024-33180
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.

🎖@cveNotify

🚨 CVE-2024-33182
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.

🎖@cveNotify

🚨 CVE-2024-35338
Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.

🎖@cveNotify

🚨 CVE-2024-40322
An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data

🎖@cveNotify

🚨 CVE-2024-37977
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37978
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2024-37981
Secure Boot Security Feature Bypass Vulnerability

🎖@cveNotify

🚨 CVE-2008-3431
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

🎖@cveNotify