Aggregator

A vulnerability was found in Consulo IP Alarm 1.4. It has been declared as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-7124. The attack can only be initiated within the local network. There is no exploit available.

Here’s a look at the most interesting products from the past month, featuring releases from: Absolute, anecdotes, ArmorCode, Binarly, Bitdefender, Druva, F5 Networks, Gcore, Guardsquare, Huntress, Ketch, LOKKER, Malwarebytes, NETGEAR, Nudge Security, Prompt Security, Rapid7, Revenera, Skyhigh Security, Strivacity, Tenable, Trellix, Vanta, Veritas Technologies, and Wing Security. Bitdefender Security for Creators protects YouTube content creators and influencers from hackers Bitdefender Security for Creators safeguards content channels and social media accounts from takeovers and supports Windows, … More →

The post Infosec products of the month: September 2024 appeared first on Help Net Security.

A vulnerability classified as very critical was found in Wireshark 1.4.0/1.4.1/1.4.2/1.4.3/1.4.4. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2011-1591. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Apple Mac OS X up to 10.11.5. Affected is an unknown function of the component QuickTime. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2016-4599. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in AYS AI ChatBot with ChatGPT and Content Generator Plugin up to 2.0.x on WordPress. It has been declared as critical. Affected by this vulnerability is the function AYS_chatgpt_disconnect/AYS_chatgpt_connect/AYS_chatgpt_save_feedback. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-7714. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Security Ultimate, Small Business Security, Safe Server, Endpoint Antivirus, Endpoint Security for Windows, Server Security for Windows Server, Mail Security for Microsoft Exchange Server, Mail Security for IBM Domino, Security for Microsoft SharePoint Server and File Security for Microsoft Azure up to 1250 on Windows. This affects an unknown part. The manipulation leads to insecure operation on windows junction / mount point. This vulnerability is uniquely identified as CVE-2024-7400. Local access is required to approach this attack. There is no exploit available.

整体活动时间：2024.9.19-2024.10.13