SEC Consult SA-20241024-0 :: Unauthenticated Path Traversal Vulnerability in Lawo AG – vsm LTC Time Sync (vTimeSync) (CVE-2024-6049)
Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Oct 24 SEC Consult Vulnerability Lab Security Advisory < 20241024-0 > ======================================================================= title: Unauthenticated Path Traversal...
[RESEARCH] DTLS ‘ClientHello’ Race Conditions in WebRTC Implementations
Posted by Sandro Gauci via Fulldisclosure on Oct 24 Dear Full Disclosure community, We've released a white paper detailing a critical vulnerability affecting multiple WebRTC...
Adversary3 updated with 700 malware and C2 panel vulnerabilities
Posted by malvuln on Oct 24 Adversary3 malware vulnerability intel tool for third-party attackers living off malware (LOM), updated with 700 malware and C2 panel...
DSA-5797-1 twisted – security update
Multiple security issues were found in Twisted, an event-based framework for internet applications, which could result in incorrect ordering of HTTP requests or cross-site scripting....
DSA-5796-1 libheif – security update
Multiple security issues were found in libheif, a library to parse HEIF and AVIF files, which could result in denial of service or potentially the...
mysql8.0-8.0.40-1.fc41
FEDORA-2024-9bef6cc6d4 Packages in this update: mysql8.0-8.0.40-1.fc41 Update description: MySQL 8.0.40 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-40.html Read More
mysql8.0-8.0.40-1.fc40
FEDORA-2024-0c1c9227e5 Packages in this update: mysql8.0-8.0.40-1.fc40 Update description: MySQL 8.0.40 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-40.html Read More
buildah-1.37.5-1.fc40 podman-5.2.5-2.fc40
FEDORA-2024-054752ae69 Packages in this update: buildah-1.37.5-1.fc40 podman-5.2.5-2.fc40 Update description: Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676. Read More
ZDI-24-1422: Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in...
A Vulnerability in Fortinet FortiManager Could Allow for Remote Code Execution
A vulnerability has been discovered in Fortinet FortiManager which could allow for remote code execution. FortiManager is a network and security management tool that provides...