KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO
On March 8, 2024, KrebsOnSecurity published a deep dive on the consumer data broker Radaris, showing how the original owners are two men in Massachusetts who operated multiple Russian language dating services and affiliate programs, in addition to a dizzying array of people-search websites. The subjects of that piece are threatening to sue KrebsOnSecurity for defamation unless the story is retracted. Meanwhile, their attorney has admitted that the person Radaris named as the CEO from its inception is a fabricated identity.

Read more »

Vulnerability Summary for the Week of June 10, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source & Patch Info actpro -- extra_product_options_for_woocommerce  Missing Authorization vulnerability in actpro Extra Product Options for WooCommerce.This issue affects Extra Product Options for WooCommerce: from n/a through 3.0.6. 2024-06-10 8.8 CVE-2024-35727audit@patchstack.com adfinis--document-merge-service  Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Versions 6.5.1 and prior are vulnerable to remote code execution via server-side template injection which, when executed as root, can result in full takeover of the affected system. As of time of publication, no patched version exists, nor have any known workarounds been disclosed. 2024-06-11 9.9 CVE-2024-37301security-advisories@github.comsecurity-advisories@github.com Adobe--Adobe Commerce  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction. 2024-06-13 9.8 CVE-2024-34102psirt@adobe.com Adobe--Adobe Commerce  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required 2024-06-13 9.1 CVE-2024-34108psirt@adobe.com Adobe--Adobe Commerce  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction, but attack complexity is high. 2024-06-13 8.1 CVE-2024-34103psirt@adobe.com Adobe--Adobe Commerce  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and integrity impact. Exploitation of this issue does not require user interaction. 2024-06-13 8.2 CVE-2024-34104psirt@adobe.com Adobe--Adobe Commerce  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required. 2024-06-13 7.2 CVE-2024-34109psirt@adobe.com Adobe--Adobe Commerce  Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A high-privilege attacker could exploit this vulnerability by uploading a malicious file to the system, which could then be executed. Exploitation of this issue does not require user interaction. 2024-06-13 7.2 CVE-2024-34110psirt@adobe.com Adobe--Adobe Experience Manager  Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. 2024-06-13 7.5 CVE-2024-26029psirt@adobe.com Adobe--Adobe Framemaker Publishing Server  Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction. 2024-06-13 10 CVE-2024-30299psirt@adobe.com Adobe--Adobe Framemaker Publishing Server  Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user privileges. Exploitation of this issue does not require user interaction. 2024-06-13 9.8 CVE-2024-30300psirt@adobe.com Adobe--ColdFusion  ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could exploit this vulnerability to gain unauthorized access to sensitive files or data. Exploitation of this issue does not require user interaction. 2024-06-13 7.5 CVE-2024-34112psirt@adobe.com Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-06-13 7.8 CVE-2024-20753psirt@adobe.com Adobe--Substance3D - Stager  Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-06-13 7.8 CVE-2024-34115psirt@adobe.com aimeos--aimeos-core  Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the context of the web server. Version 2024.04.5 fixes the issue. 2024-06-11 7.2 CVE-2024-37295security-advisories@github.com apple -- macos  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to break out of its sandbox. 2024-06-10 8.6 CVE-2024-23299product-security@apple.comproduct-security@apple.comproduct-security@apple.com apple -- macos  A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution. 2024-06-10 7.8 CVE-2022-32897product-security@apple.com apple -- macos  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpected termination or disclosure of process memory. 2024-06-10 7.1 CVE-2022-48578product-security@apple.com apple -- macos  An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox. 2024-06-10 7.8 CVE-2022-48683product-security@apple.com arraytics--WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin  The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the make_staff() function in all versions up to, and including, 1.0.21. This makes it possible for unauthenticated attackers to grant users staff permissions. 2024-06-14 7.3 CVE-2024-1094security@wordfence.comsecurity@wordfence.com Aruphash--Crafthemes Demo Import  Missing Authentication for Critical Function vulnerability in Aruphash Crafthemes Demo Import allows Functionality Misuse.This issue affects Crafthemes Demo Import: from n/a through 3.3. 2024-06-10 7.6 CVE-2024-34800audit@patchstack.com arwebdesign -- dashboard_to-do_list  Missing Authorization vulnerability in Andrew Rapps Dashboard To-Do List.This issue affects Dashboard To-Do List: from n/a through 1.2.0. 2024-06-10 8.8 CVE-2024-35723audit@patchstack.com ASUS--Download Master  The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload malicious web page files to the website directory, allowing arbitrary system commands to be executed upon browsing the webpage. 2024-06-14 7.2 CVE-2024-31161twcert@cert.org.twtwcert@cert.org.tw ASUS--Download Master  The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device. 2024-06-14 7.2 CVE-2024-31162twcert@cert.org.twtwcert@cert.org.tw ASUS--Download Master  ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device. 2024-06-14 7.2 CVE-2024-31163twcert@cert.org.twtwcert@cert.org.tw ASUS--DSL-N17U  Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device. 2024-06-14 9.8 CVE-2024-3912twcert@cert.org.twtwcert@cert.org.tw ASUS--ZenWiFi XT8  Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device. 2024-06-14 9.8 CVE-2024-3080twcert@cert.org.twtwcert@cert.org.tw ASUS--ZenWiFi XT8  Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device. 2024-06-14 7.2 CVE-2024-3079twcert@cert.org.twtwcert@cert.org.tw avast -- antivirus  A sym-linked file accessed via the repair function in Avast Antivirus troubleshooting - > repair) feature, which attempts to delete a file in the current user's AppData directory as NT AUTHORITYSYSTEM. A low-privileged user can make a pseudo-symlink and a junction folder and point to a file on the system. This can provide a low-privileged user an Elevation of Privilege to win a race-condition which will re-create the system files and make Windows callback to a specially-crafted file which could be used to launch a privileged shell instance. This issue affects Avast Antivirus prior to 24.2. 2024-06-10 7 CVE-2024-5102security@nortonlifelock.com awplife -- image_gallery  Missing Authorization vulnerability in A WP Life Image Gallery - Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery - Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5. 2024-06-10 8.8 CVE-2024-35721audit@patchstack.com awplife -- slider_responsive_slideshow  Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow - Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow - Image slider, Gallery slideshow: from n/a through 1.4.0. 2024-06-10 8.8 CVE-2024-35722audit@patchstack.com awslabs--aws-deployment-framework  The AWS Deployment Framework (ADF) is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations while taking advantage of services such as AWS CodePipeline, AWS CodeBuild, and AWS CodeCommit to alleviate the heavy lifting and management compared to a traditional CI/CD setup. ADF contains a bootstrap process that is responsible to deploy ADF's bootstrap stacks to facilitate multi-account cross-region deployments. The ADF bootstrap process relies on elevated privileges to perform this task. Two versions of the bootstrap process exist; a code-change driven pipeline using AWS CodeBuild and an event-driven state machine using AWS Lambda. If an actor has permissions to change the behavior of the CodeBuild project or the Lambda function, they would be able to escalate their privileges. Prior to version 4.0.0, the bootstrap CodeBuild role provides access to the `sts:AssumeRole` operation without further restrictions. Therefore, it is able to assume into any AWS Account in the AWS Organization with the elevated privileges provided by the cross-account access role. By default, this role is not restricted when it is created by AWS Organizations, providing Administrator level access to the AWS resources in the AWS Account. The patches for this issue are included in `aws-deployment-framework` version 4.0.0. As a temporary mitigation, add a permissions boundary to the roles created by ADF in the management account. The permissions boundary should deny all IAM and STS actions. This permissions boundary should be in place until you upgrade ADF or bootstrap a new account. While the permissions boundary is in place, the account management and bootstrapping of accounts are unable to create, update, or assume into roles. This mitigates the privilege escalation risk, but also disables ADF's ability to create, manage, and bootstrap accounts. 2024-06-11 7.5 CVE-2024-37293security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com BlackBerry--QNX Software Development Platform  An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process. 2024-06-11 9 CVE-2024-35213secure@blackberry.com bosathemes -- bosa_elementor_addons_and_templates_for_woocommerce  Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates for WooCommerce: from n/a through 1.0.12. 2024-06-10 8.8 CVE-2024-35724audit@patchstack.com buddypress_cover_project -- buddypress_cover  Unrestricted Upload of File with Dangerous Type vulnerability in Asghar Hatampoor BuddyPress Cover allows Code Injection.This issue affects BuddyPress Cover: from n/a through 2.1.4.2. 2024-06-10 9.8 CVE-2024-35746audit@patchstack.com cilium--cilium  Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.0 and prior to versions 1.13.7, 1.14.12, and 1.15.6, the output of `cilium-bugtool` can contain sensitive data when the tool is run (with the `--envoy-dump` flag set) against Cilium deployments with the Envoy proxy enabled. Users of the TLS inspection, Ingress with TLS termination, Gateway API with TLS termination, and Kafka network policies with API key filtering features are affected. The sensitive data includes the CA certificate, certificate chain, and private key used by Cilium HTTP Network Policies, and when using Ingress/Gateway API and the API keys used in Kafka-related network policy. `cilium-bugtool` is a debugging tool that is typically invoked manually and does not run during the normal operation of a Cilium cluster. This issue has been patched in Cilium v1.15.6, v1.14.12, and v1.13.17. There is no workaround to this issue. 2024-06-13 7.9 CVE-2024-37307security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com cloudfoundry -- cf-deployment  Improper handling of requests in Routing Release > v0.273.0 and dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk- >sk_dst_cache, then call dst_release(old_dst). Note that sk_dst_reset(sk) is implementing this protocol correctly, while __dst_negative_advice() uses the wrong order. Given that ip6_negative_advice() has special logic against RTF_CACHE, this means each of the three - >negative_advice() existing methods must perform the sk_dst_reset() themselves. Note the check against NULL dst is centralized in __dst_negative_advice(), there is no need to duplicate it in various callbacks. Many thanks to Clement Lecigne for tracking this issue. This old bug became visible after the blamed commit, using UDP sockets. 2024-06-10 7.8 CVE-2024-36971416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67 lnbits--lnbits  LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout (about 30s) lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. This vulnerability is fixed in 0.12.6. 2024-06-14 8.1 CVE-2024-34694security-advisories@github.com mcnardelli--Where I Was, Where I Will Be  The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version oob_skb under sk_receive_queue lock. Billy Jheng Bing-Jhong reported a race between __unix_gc() and queue_oob(). __unix_gc() tries to garbage-collect close()d inflight sockets, and then if the socket has MSG_OOB in unix_sk(sk)- >oob_skb, GC will drop the reference and set NULL to it locklessly. However, the peer socket still can send MSG_OOB message and queue_oob() can update unix_sk(sk)- >oob_skb concurrently, leading NULL pointer dereference. [0] To fix the issue, let's update unix_sk(sk)- >oob_skb under the sk_receive_queue's lock and take it everywhere we touch oob_skb. Note that we defer kfree_skb() in manage_oob() to silence lockdep false-positive (See [1]). [0]: BUG: kernel NULL pointer dereference, address: 0000000000000008 PF: supervisor write access in kernel mode PF: error_code(0x0002) - not-present page PGD 8000000009f5e067 P4D 8000000009f5e067 PUD 9f5d067 PMD 0 Oops: 0002 [#1] PREEMPT SMP PTI CPU: 3 PID: 50 Comm: kworker/3:1 Not tainted 6.9.0-rc5-00191-gd091e579b864 #110 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: events delayed_fput RIP: 0010:skb_dequeue (./include/linux/skbuff.h:2386 ./include/linux/skbuff.h:2402 net/core/skbuff.c:3847) Code: 39 e3 74 3e 8b 43 10 48 89 ef 83 e8 01 89 43 10 49 8b 44 24 08 49 c7 44 24 08 00 00 00 00 49 8b 14 24 49 c7 04 24 00 00 00 00 89 42 08 48 89 10 e8 e7 c5 42 00 4c 89 e0 5b 5d 41 5c c3 cc cc RSP: 0018:ffffc900001bfd48 EFLAGS: 00000002 RAX: 0000000000000000 RBX: ffff8880088f5ae8 RCX: 00000000361289f9 RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffff8880088f5b00 RBP: ffff8880088f5b00 R08: 0000000000080000 R09: 0000000000000001 R10: 0000000000000003 R11: 0000000000000001 R12: ffff8880056b6a00 R13: ffff8880088f5280 R14: 0000000000000001 R15: ffff8880088f5a80 FS: 0000000000000000(0000) GS:ffff88807dd80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 0000000006314000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: unix_release_sock (net/unix/af_unix.c:654) unix_release (net/unix/af_unix.c:1050) __sock_release (net/socket.c:660) sock_close (net/socket.c:1423) __fput (fs/file_table.c:423) delayed_fput (fs/file_table.c:444 (discriminator 3)) process_one_work (kernel/workqueue.c:3259) worker_thread (kernel/workqueue.c:3329 kernel/workqueue.c:3416) kthread (kernel/kthread.c:388) ret_from_fork (arch/x86/kernel/process.c:153) ret_from_fork_asm (arch/x86/entry/entry_64.S:257) Modules linked in: CR2: 0000000000000008 2024-06-10 not yet calculated CVE-2024-36972416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67416baaa9-dc9f-4396-8d5f-8c081fb06d67 mintplex-labs--mintplex-labs/anything-llm  A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the `normalizePath()` function, intended to defend against path traversal attacks. This vulnerability enables the manager to read, delete, or overwrite the 'anythingllm.db' database file and other files stored in the 'storage' directory, such as internal communication keys and .env secrets. Exploitation of this vulnerability could lead to application compromise, denial of service (DoS) attacks, and unauthorized admin account takeover. The issue stems from improper validation of user-supplied input in the process of setting a custom logo for the app, which can be manipulated to achieve arbitrary file read, deletion, or overwrite, and to execute a DoS attack by deleting critical files required for the application's operation. 2024-06-12 not yet calculated CVE-2024-5211security@huntr.devsecurity@huntr.dev Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes. 2024-06-13 not yet calculated CVE-2024-38279ics-cert@hq.dhs.gov Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text. 2024-06-13 not yet calculated CVE-2024-38280ics-cert@hq.dhs.gov Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device. 2024-06-13 not yet calculated CVE-2024-38281ics-cert@hq.dhs.gov Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system. 2024-06-13 not yet calculated CVE-2024-38282ics-cert@hq.dhs.gov Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  Sensitive customer information is stored in the device without encryption. 2024-06-13 not yet calculated CVE-2024-38283ics-cert@hq.dhs.gov Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls. 2024-06-13 not yet calculated CVE-2024-38284ics-cert@hq.dhs.gov Motorola Solutions--Vigilant Fixed LPR Coms Box (BCAV1F2-C600)  Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools. 2024-06-13 not yet calculated CVE-2024-38285ics-cert@hq.dhs.gov Mozilla--Firefox  If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the `Referer` and `Sec-*` headers, meaning there is the potential for incorrect security checks within the browser in addition to incorrect or misleading information sent to remote websites. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5687security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5688security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5689security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5690security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5691security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in the extension. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5692security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5693security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5694security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in rarer situations, memory corruption could have occurred. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5695security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5696security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5697security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5698security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case-insensitive comparison. This could have resulted in the browser not correctly honoring the behaviors specified by the prefix. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5699security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5700security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127. 2024-06-11 not yet calculated CVE-2024-5701security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox  Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12. 2024-06-11 not yet calculated CVE-2024-5702security@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.orgsecurity@mozilla.org Mozilla--Firefox for iOS  When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination This vulnerability affects Firefox for iOS < 127. 2024-06-13 not yet calculated CVE-2024-38312security@mozilla.orgsecurity@mozilla.org Mozilla--Firefox for iOS  In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS < 127. 2024-06-13 not yet calculated CVE-2024-38313security@mozilla.orgsecurity@mozilla.org n/a--n/a  An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes before checking the TOTP. 2024-06-10 not yet calculated CVE-2022-45168cve@mitre.org n/a--n/a  An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the uri parameter. The web application (through its vShare functionality section) doesn't properly check parameters, sent in HTTP requests as input, before saving them on the server. In addition, crafted JavaScript content can then be reflected back to the end user and executed by the web browser. 2024-06-10 not yet calculated CVE-2022-45176cve@mitre.org n/a--n/a  XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information. 2024-06-13 not yet calculated CVE-2023-35858cve@mitre.org n/a--n/a  A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters. 2024-06-13 not yet calculated CVE-2023-35859cve@mitre.org n/a--n/a  A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php. 2024-06-13 not yet calculated CVE-2023-35860cve@mitre.org n/a--n/a  An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function. 2024-06-12 not yet calculated CVE-2023-49559cve@mitre.org n/a--n/a  NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging. 2024-06-13 not yet calculated CVE-2023-52890cve@mitre.org n/a--n/a  A cross-site scripting (XSS) vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter. 2024-06-12 not yet calculated CVE-2024-22855cve@mitre.org n/a--n/a  Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the device's movable parts to destinations that exceed the devices' maximum coordinates via the printing of a malicious .gcode file. 2024-06-12 not yet calculated CVE-2024-24051cve@mitre.org n/a--n/a  Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the service parameter of the load-logfiles function. 2024-06-14 not yet calculated CVE-2024-24320cve@mitre.org n/a--n/a  An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it. 2024-06-11 not yet calculated CVE-2024-26330cve@mitre.orgcve@mitre.org n/a--n/a  An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit v.7.00.6700 and before allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components. 2024-06-10 not yet calculated CVE-2024-26507cve@mitre.org n/a--n/a  BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code." 2024-06-10 not yet calculated CVE-2024-31613cve@mitre.org n/a--n/a  File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint. 2024-06-13 not yet calculated CVE-2024-31777cve@mitre.org n/a--n/a  Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the badge template editing function. 2024-06-13 not yet calculated CVE-2024-33253cve@mitre.org n/a--n/a  An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. This vulnerability can allow attackers to access the router via a brute-force attack. 2024-06-14 not yet calculated CVE-2024-33373cve@mitre.org n/a--n/a  Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication. 2024-06-14 not yet calculated CVE-2024-33374cve@mitre.org n/a--n/a  LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware. 2024-06-14 not yet calculated CVE-2024-33375cve@mitre.org n/a--n/a  LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page. 2024-06-14 not yet calculated CVE-2024-33377cve@mitre.org n/a--n/a  Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting. 2024-06-10 not yet calculated CVE-2024-33850cve@mitre.org n/a--n/a  An issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API. 2024-06-10 not yet calculated CVE-2024-34332cve@mitre.org n/a--n/a  Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app. 2024-06-11 not yet calculated CVE-2024-34405cve@mitre.orgcve@mitre.org n/a--n/a  Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link. 2024-06-11 not yet calculated CVE-2024-34406cve@mitre.orgcve@mitre.org n/a--n/a  Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. These credentials can also be used to login to the administration panel and to perform privileged actions. 2024-06-14 not yet calculated CVE-2024-34539cve@mitre.org n/a--n/a  A vulnerability was found in libyaml up to 0.2.5. Affected by this issue is the function yaml_event_delete of the file /src/libyaml/src/api.c. The manipulation leads to a double-free. 2024-06-13 not yet calculated CVE-2024-35325cve@mitre.org n/a--n/a  libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free. 2024-06-13 not yet calculated CVE-2024-35326cve@mitre.org n/a--n/a  libyaml v0.2.5 is vulnerable to DDOS. Affected by this issue is the function yaml_parser_parse of the file /src/libyaml/src/parser.c. 2024-06-13 not yet calculated CVE-2024-35328cve@mitre.org n/a--n/a  libyaml 0.2.5 is vulnerable to a heap-based Buffer Overflow in yaml_document_add_sequence in api.c. NOTE: the supplier disputes this because the finding represents a user error. The problem is that the application, which was making use of the libyaml library, omitted the required calls to the yaml_document_initialize and yaml_document_delete functions. 2024-06-11 not yet calculated CVE-2024-35329cve@mitre.orgcve@mitre.org n/a--n/a  An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts. 2024-06-12 not yet calculated CVE-2024-36523cve@mitre.org n/a--n/a  nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php. 2024-06-10 not yet calculated CVE-2024-36528cve@mitre.org n/a--n/a  nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component. 2024-06-10 not yet calculated CVE-2024-36531cve@mitre.org n/a--n/a  An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary. 2024-06-13 not yet calculated CVE-2024-36586cve@mitre.org n/a--n/a  Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy. 2024-06-13 not yet calculated CVE-2024-36587cve@mitre.org n/a--n/a  An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbitrary users via a crafted HTTP request. 2024-06-13 not yet calculated CVE-2024-36588cve@mitre.org n/a--n/a  An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd815 was discovered to store credentials in plaintext. 2024-06-13 not yet calculated CVE-2024-36589cve@mitre.org n/a--n/a  Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php. 2024-06-14 not yet calculated CVE-2024-36597cve@mitre.org n/a--n/a  An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a crafted image file. 2024-06-14 not yet calculated CVE-2024-36598cve@mitre.org n/a--n/a  A cross-site scripting (XSS) vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php. 2024-06-14 not yet calculated CVE-2024-36599cve@mitre.org n/a--n/a  Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file. 2024-06-14 not yet calculated CVE-2024-36600cve@mitre.org n/a--n/a  A stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page. 2024-06-13 not yet calculated CVE-2024-36647cve@mitre.org n/a--n/a  TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack. 2024-06-11 not yet calculated CVE-2024-36650cve@mitre.org n/a--n/a  In MintHCM 4.0.3, a registered user can execute arbitrary JavaScript code and achieve a reflected Cross-site Scripting (XSS) attack. 2024-06-14 not yet calculated CVE-2024-36656cve@mitre.org n/a--n/a  Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information. 2024-06-12 not yet calculated CVE-2024-36691cve@mitre.org n/a--n/a  libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c. 2024-06-11 not yet calculated CVE-2024-36702cve@mitre.orgcve@mitre.orgcve@mitre.org n/a--n/a  A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: (/ SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : _ $LT $impl $u20 $rhai.. engine.. Engine$GT$::eval_stmt::h3f1d68ce37fc6e96). Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file eval_stmt_block function. 2024-06-13 not yet calculated CVE-2024-36760cve@mitre.org n/a--n/a  naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs. 2024-06-12 not yet calculated CVE-2024-36761cve@mitre.orgcve@mitre.org n/a--n/a  Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root via a directory traversal. 2024-06-11 not yet calculated CVE-2024-36821cve@mitre.orgcve@mitre.org n/a--n/a  SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to news_details.php and location_details.php; and the section parameter to services.php. 2024-06-12 not yet calculated CVE-2024-36840cve@mitre.orgcve@mitre.orgcve@mitre.orgcve@mitre.orgcve@mitre.orgcve@mitre.org n/a--n/a  RMQTT Broker 0.4.0 allows remote attackers to cause a Denial of Service (daemon crash) via a certain sequence of five TCP packets. 2024-06-12 not yet calculated CVE-2024-36856cve@mitre.orgcve@mitre.org n/a--n/a  SummerNote 0.8.18 is vulnerable to Cross Site Scripting (XSS) via the Code View Function. 2024-06-12 not yet calculated CVE-2024-37629cve@mitre.orgcve@mitre.org n/a--n/a  D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root. 2024-06-13 not yet calculated CVE-2024-37630cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule. 2024-06-13 not yet calculated CVE-2024-37631cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth . 2024-06-13 not yet calculated CVE-2024-37632cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg 2024-06-13 not yet calculated CVE-2024-37633cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg. 2024-06-13 not yet calculated CVE-2024-37634cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg 2024-06-13 not yet calculated CVE-2024-37635cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg. 2024-06-14 not yet calculated CVE-2024-37637cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules. 2024-06-14 not yet calculated CVE-2024-37639cve@mitre.org n/a--n/a  TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg. 2024-06-14 not yet calculated CVE-2024-37640cve@mitre.org n/a--n/a  TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule 2024-06-14 not yet calculated CVE-2024-37641cve@mitre.org n/a--n/a  TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability via the ipv4_ping, ipv6_ping parameter at /formSystemCheck . 2024-06-14 not yet calculated CVE-2024-37642cve@mitre.org n/a--n/a  TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formPasswordAuth . 2024-06-14 not yet calculated CVE-2024-37643cve@mitre.org n/a--n/a  TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. 2024-06-14 not yet calculated CVE-2024-37644cve@mitre.org n/a--n/a  TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formSysLog . 2024-06-14 not yet calculated CVE-2024-37645cve@mitre.org n/a--n/a  An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator via a crafted POST request. 2024-06-12 not yet calculated CVE-2024-37665cve@mitre.orgcve@mitre.org n/a--n/a  Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter. 2024-06-14 not yet calculated CVE-2024-37831cve@mitre.org n/a--n/a  A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter. 2024-06-13 not yet calculated CVE-2024-37849cve@mitre.org n/a--n/a  UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octet_view.cpp and in function DecodeRlsMessage in src/lib/rls/rls_pdu.cpp 2024-06-13 not yet calculated CVE-2024-37877cve@mitre.org n/a--n/a  Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a remote attacker to execute arbitrary code via the /TWCMS-gh-pages/twcms/runtime/twcms_view/default,index.htm.php" PHP directly echoes parameters input from external sources 2024-06-12 not yet calculated CVE-2024-37878cve@mitre.org n/a--n/a  ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php. 2024-06-13 not yet calculated CVE-2024-38293cve@mitre.orgcve@mitre.org n/a--n/a  ALCASAR before 3.6.1 allows email_registration_back.php remote code execution. 2024-06-13 not yet calculated CVE-2024-38294cve@mitre.orgcve@mitre.org n/a--n/a  ALCASAR before 3.6.1 allows still_connected.php remote code execution. 2024-06-13 not yet calculated CVE-2024-38295cve@mitre.orgcve@mitre.org Palo Alto Networks--Cortex XDR Agent  A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability. 2024-06-12 not yet calculated CVE-2024-5905psirt@paloaltonetworks.com Palo Alto Networks--Cortex XDR Agent  A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit. 2024-06-12 not yet calculated CVE-2024-5907psirt@paloaltonetworks.com Palo Alto Networks--Cortex XDR Agent  A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity. 2024-06-12 not yet calculated CVE-2024-5909psirt@paloaltonetworks.com Palo Alto Networks--GlobalProtect App  A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs. 2024-06-12 not yet calculated CVE-2024-5908psirt@paloaltonetworks.com Palo Alto Networks--Prisma Cloud Compute  A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user. 2024-06-12 not yet calculated CVE-2024-5906psirt@paloaltonetworks.com Pandora FMS--Pandora FMS  System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through

Read more »

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested
A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years.

Read more »

Patch Tuesday, June 2024 “Recall” Edition
Microsoft today released updates to fix more than 50 security vulnerabilities in Windows and related software, a relatively light Patch Tuesday this month for Windows administrators. The software giant also responded to a torrent of negative feedback on a new feature of Redmond's flagship operating system that constantly takes screenshots of whatever users are doing on their computers, saying the feature would no longer be enabled by default.

Read more »

‘Operation Endgame’ Hits Malware Delivery Platforms
Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed "the largest ever operation against botnets," the international effort is being billed as the opening salvo in an ongoing campaign targeting advanced malware "droppers" or "loaders" like IcedID, Smokeloader and Trickbot.

Read more »

Is Your Computer Part of ‘The Largest Botnet Ever?’
The U.S. Department of Justice (DOJ) today said they arrested the alleged operator of 911 S5, a ten-year-old online anonymity service that was powered by what the director of the FBI called "likely the world's largest botnet ever." The arrest coincided with the seizure of the 911 S5 website and supporting infrastructure, which the government says turned computers running various "free VPN" products into Internet traffic relays that facilitated billions of dollars in online fraud and cybercrime.

Read more »

Treasury Sanctions Creators of 911 S5 Proxy Botnet
The U.S. Department of the Treasury today unveiled sanctions against three Chinese nationals for allegedly operating 911 S5, an online anonymity service that for many years was the easiest and cheapest way to route one's Web traffic through malware-infected computers around the globe. KrebsOnSecurity identified one of the three men in a July 2022 investigation into 911 S5, which was massively hacked and then closed ten days later.

Read more »

Stark Industries Solutions: An Iron Hammer in the Cloud
Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. An investigation into Stark Industries reveals it is being used as a global proxy network that conceals the true source of cyberattacks and disinformation campaigns against enemies of Russia.

Read more »

Why Your Wi-Fi Router Doubles as an Apple AirTag
Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly available data from Apple to track the location of billions of devices globally -- including non-Apple devices like Starlink systems -- and found they could use this data to monitor the destruction of Gaza, as well as the movements and in many cases identities of Russian and Ukrainian troops.

Read more »

Patch Tuesday, May 2024 Edition
Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS and Adobe users, and for the Chrome Web browser, which just patched its own zero-day flaw.

Read more »

How Did Authorities Identify the Alleged Lockbit Boss?
Last week, the United States joined the U.K. and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. LockBit's leader "LockBitSupp" claims the feds named the wrong guy, saying the charges don't explain how they connected him to Khoroshev. This post examines the activities of Khoroshev's many alter egos on the cybercrime forums, and tracks the career of a gifted malware author who has written and sold malicious code for the past 14 years.

Read more »

Amazon has clearance 9th-generation WiFi iPads on sale for $80-$100 off MSRP
Amazon has Apple's 9th generation 10.2" WiFi iPads on sale for $80-$100 off MSRP, starting only $249. Their prices are the lowest available for new iPads anywhere: - 10" 64GB WiFi iPad (Space Gray or Silver): $249 $80 off MSRP - 10" 64GB WiFi iPad (Space Gray or Silver): $379 $100 off MSRP Note that Amazon tends to sell out quickly. However, they do restock regularly, so check their site often for the latest stock status. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Amazon has clearance 9th-generation WiFi iPads on sale for $80-$100 off MSRP
Amazon has Apple's 9th generation 10.2" WiFi iPads on sale for $80-$100 off MSRP, starting only $249. Their prices are the lowest available for new iPads anywhere: - 10" 64GB WiFi iPad (Space Gray or Silver): $249 $80 off MSRP - 10" 64GB WiFi iPad (Space Gray or Silver): $379 $100 off MSRP Note that Amazon tends to sell out quickly. However, they do restock regularly, so check their site often for the latest stock status. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Amazon has clearance 9th-generation WiFi iPads on sale for $80-$100 off MSRP
Amazon has Apple's 9th generation 10.2" WiFi iPads on sale for $80-$100 off MSRP, starting only $249. Their prices are the lowest available for new iPads anywhere: - 10" 64GB WiFi iPad (Space Gray or Silver): $249 $80 off MSRP - 10" 64GB WiFi iPad (Space Gray or Silver): $379 $100 off MSRP Note that Amazon tends to sell out quickly. However, they do restock regularly, so check their site often for the latest stock status. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple is offering a $50 discount on 2nd-generation, full-size HomePods, Certified Refurbished
Apple has Certified Refurbished White and Midnight HomePods available for $249, Certified Refurbished. That's $50 off MSRP and the lowest price currently available for a full-size Apple HomePod today. Shipping is free, and each HomePod includes Apple's standard 1-year warranty. The outer case is new. According to Apple, "Each Apple Certified Refurbished Product: - Undergoes full functionality testing and any defective modules identified in testing are replaced. - Is put through a thorough cleaning process and inspection. - Is repackaged (including appropriate manuals, cables, new boxes). - Includes either the Operating System originally shipped with the unit or, in some cases, a more recent version. - Is placed into a Final QA inspection prior to being added to sellable refurbished stock." For the latest prices & sales, see our HomePod Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

The latest MacBook Pro sale at Amazon: 16-inch M3 Pro and M3 Max MacBook Pros for $400 off Apple’s MSRP!
Amazon is offering instant discounts on 16" M3 Pro and 16" M3 Max MacBook Pros ranging up to $400 off MSRP as part of their early July 4th sale. Shipping is free. These are the lowest prices currently available for new 16" Apple MacBook Pros: - 16" M3 Pro MacBook Pros (18GB/512GB) Black: $2199, $300 off MSRP - 16" M3 Pro MacBook Pros (18GB/512GB) Silver: $2149, $350 off MSRP - 16" M3 Pro MacBook Pros (36GB/512GB) Black: $2649.99, $250 off MSRP - 16" M3 Pro MacBook Pros (36GB/512GB) Silver: $2499, $400 off MSRP - 16" M3 Max MacBook Pros (36GB/1TB) Black: $3249, $250 off MSRP - 16" M3 Max MacBook Pros (36GB/1TB) Silver: $3249, $250 off MSRP - 16" M3 Max MacBook Pros (48GB/1TB) Black: $3699, $300 off MSRP - 16" M3 Max MacBook Pros (48GB/1TB) Silver: $3719, $280 off MSRP Note that Amazon's prices are dynamic and can change at any time. Stock as well. We list the lowest price of the day. Be sure to check their site often! For the latest prices and sales, see our 16" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

14-inch M3 Pro MacBook Pros with 36GB of RAM on sale for $200 off Apple’s MSRP
B&H Photo has 14" M3 Pro MacBook Pros with 36GB of RAM and 512GB or 1TB SSDs in stock today and on sale for $200 off Apple's MSRP, each including free 1-2 day shipping: - 14" M3 Pro MacBook Pro (36GB RAM/512GB SSD): $2199, $200 off MSRP - 14" M3 Pro MacBook Pro (36GB RAM/1TB SSD): $2599, $200 off MSRP These are the cheapest 14" M3 Pro MacBook Pros available, new, with 36GB of memory. The post first appeared on MacPrices.net.

Read more »

14-inch M3 MacBook Pros with 16GB of RAM on sale for $150-$200 off Apple’s MSRP
B&H Photo has 14" M3 MacBook Pros with 16GB of RAM and 512GB or 1TB SSDs in stock today and on sale for $150-$200 off Apple's MSRP, each including free 1-2 day shipping: - 14" M3 MacBook Pro (16GB RAM/512GB SSD): $1599, $200 off MSRP - 14" M3 MacBook Pro (16GB RAM/1TB SSD): $1849, $150 off MSRP These are the cheapest 14" M3 MacBook Pros available, new, with 16GB of memory. The post first appeared on MacPrices.net.

Read more »

Amazon is offering $170-$200 discounts on new 15-inch M3 MacBook Airs
Amazon is offering a $170-$200 discount on every configuration and color of Apple's M3-powered 15" MacBook Airs. Prices start at $1129 for models with 8GB of RAM and 256GB of storage: - 15" M3 MacBook Air/8GB/256GB: $1129, $170 off - 15" M3 MacBook Air/8GB/512GB: $1329, $170 off - 15" M3 MacBook Air/16GB/512GB: $1499, $200 off Their prices are the lowest prices available for new 15" M3 MacBook Airs among Apple's retailers. For the latest sales and deals, see our 15" MacBook Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Amazon is offering a $200 discount on 14″ M3 MacBook Pros
Amazon has 14-inch M3 MacBook Pros in stock and on sale for $150-$200 off MSRP. Shipping is free. Note that Amazon's stock tends to come and go, so be sure to check their site often if the model you are after is out of stock: - 14" M3 MacBook Pro (8GB RAM/512GB SSD/Space Gray or Silver): $1399, $200 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD/Space Gray): $1599.99, $200 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD/Silver): $1649, $150 off MSRP Their prices are among the lowest available for new 14" M3 MacBook Pros from any Apple retailer. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

13-inch M2 MacBook Airs on sale for only $849 at Abt
Abt Electronics has Apple 13" MacBook Airs with M2 CPUs in stock and on sale for $150 off MSRP in Space Gray, Silver, Starlight, and Midnight colors. Prices start at only $849. Their prices are the lowest currently available for new 13" M2 MacBook Airs: - 13" M2 MacBook Air (8GB RAM/256GB SSD): $849 $150 off MSRP Note that Abt's prices are dynamic and can change at any time. For the latest sales & prices, see our 13" MacBook Air Price Tracker. The post first appeared on MacPrices.net.

Read more »

24-inch M3 Apple iMacs on sale this weekend for $150 off MSRP
Amazon is offering a $150 discount on Apple's M3-powered 24" iMacs this weekend. Prices start at $1149 for models with 8GB of RAM and 256GB of storage: - 24" M3 iMac/8-core GPU/8GB/256GB: $1149.99, $150 off - 24" M3 iMac/10-core GPU/8GB/256GB: $1349.99, $150 off - 24" M3 iMac/10-core GPU/8GB/512GB: $1549.99, $150 off Their prices are currently the lowest available for new iMacs among Apple's retailers. The post first appeared on MacPrices.net.

Read more »