Aggregator

A CVSS score 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Nitesh Surana (@_niteshsurana) of Trend Micro Research' was reported to the affected vendor on: 2024-09-25, 68 days ago. The vendor is given until 2025-01-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Lucas Leong (@_wmliang_) of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2024-09-25, 68 days ago. The vendor is given until 2025-01-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Andrea Micalizzi aka rgod (@rgod777)' was reported to the affected vendor on: 2024-09-25, 68 days ago. The vendor is given until 2025-01-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2024-09-25, 68 days ago. The vendor is given until 2025-01-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Alfredo de Oliveira - Trend Micro Nebula Team' was reported to the affected vendor on: 2024-09-25, 68 days ago. The vendor is given until 2025-01-23 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A vulnerability has been found in Cisco Email Security Appliance and classified as critical. This vulnerability affects unknown code of the component Message Filter. The manipulation leads to improper input validation. This vulnerability was named CVE-2016-6356. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Linux i915 PTE Use-After-FreeI found a bug in the i915 code that allows a process with access to a

Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation BypassDocument Title:===============

# Exploit Title: Reflected XSS in Elaine's Realtime CRM Automation v6.18.17# Date: 09/2024# Exploi

Welcome to the Security Weekly Podcast Network, your all-in-one so

A vulnerability was found in Cisco Email Security Appliance and classified as critical. This issue affects some unknown processing of the component Security Policy. The manipulation leads to 7pk error. The identification of this vulnerability is CVE-2016-6357. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

在东南亚的智能手机市场，OPPO 和传音等中国企业正在猛追首位的韩国三星电子。中国企业相继推出约合 1000 多元人民币的低价机型，目前的市场份额与三星基本持平。今后高价位机型的竞争也将日益激烈。调查公司 Canalys 的数据显示，2024 年 4 月至 6 月，传音控股在菲律宾的市场份额达到 31%。大幅领先排在第 2 的三星（15%）。传音控股在整个东南亚地区占据 14% 的份额，排在第 5 位。数年前它还几乎默默无闻。三星在东南亚的市场份额在 4∼6 月降至 18%，较 2023 年初下降约 10 个百分点。

A vulnerability, which was classified as problematic, has been found in WithSecure Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, Client Security for Mac, Elements Endpoint Protection for Mac, Linux Security and Linux Protection. Affected by this issue is some unknown functionality. The manipulation leads to denial of service. This vulnerability is handled as CVE-2023-43761. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in MultiBit HD 0.1.2 and classified as problematic. This issue affects some unknown processing of the component Bitcoin Address Handler. The manipulation leads to insufficient verification of data authenticity. The identification of this vulnerability is CVE-2015-6964. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability classified as critical was found in Huawei HarmonyOS. Affected by this vulnerability is an unknown functionality of the component DP Module. The manipulation leads to Privilege Escalation. This vulnerability is known as CVE-2023-41294. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability was found in Huawei EMUI and Magic UI. It has been classified as critical. Affected is an unknown function of the component Fingerprint Module. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2022-48605. The attack can only be initiated within the local network. There is no exploit available.

A vulnerability was found in Huawei EMUI and Magic UI. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component DDMP Module. The manipulation leads to information disclosure. This vulnerability is known as CVE-2023-41293. The attack needs to be done within the local network. There is no exploit available.

A vulnerability classified as problematic has been found in Huawei EMUI and Magic UI. This affects an unknown part of the component PMS. The manipulation leads to an unknown weakness. This vulnerability is uniquely identified as CVE-2023-41301. Access to the local network is required for this attack. There is no exploit available.

A vulnerability classified as critical was found in Huawei EMUI and Magic UI. This vulnerability affects unknown code of the component Home Screen Module. The manipulation leads to path traversal. This vulnerability was named CVE-2023-41302. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability was found in General Device Manager 2.5.2.2. It has been classified as critical. This affects an unknown part. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2023-43131. The attack can only be done within the local network. Furthermore, there is an exploit available.