Month: April 2024

VMware SD-WAN Edge command execution | CVE-2024-22246

April 3, 2024

NAME__________VMware SD-WAN Edge command executionPlatforms Affected:VMware SD-WAN Edge 5.0Risk Level:7.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________VMware SD-WAN Edge could allow a remote attacker to...

Computer Laboratory Management System security bypass | CVE-2024-3139

April 3, 2024

NAME__________Computer Laboratory Management System security bypassPlatforms Affected:Sourcecodester Computer Laboratory Management System 1.0Risk Level:5.4Exploitability:Proof of ConceptConsequences:Bypass Security DESCRIPTION__________Computer Laboratory Management System...

Computer Laboratory Management System cross-site scripting | CVE-2024-3140

April 3, 2024

NAME__________Computer Laboratory Management System cross-site scriptingPlatforms Affected:Sourcecodester Computer Laboratory Management System 1.0Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Computer Laboratory Management System is vulnerable...

Samsung Mobile devices code execution | CVE-2024-20843

April 3, 2024

NAME__________Samsung Mobile devices code executionPlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

IOSiX IO-1020 default account | CVE-2024-30210

April 3, 2024

NAME__________IOSiX IO-1020 default accountPlatforms Affected:IOSiX IO-1020 359 IOSiX IO-1020 358Risk Level:7.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________IOSiX IO-1020 contains a default Wi-Fi password. A...

Samsung Mobile devices information disclosure | CVE-2024-20850

April 3, 2024

NAME__________Samsung Mobile devices information disclosurePlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

OpenID Connect Authentication extension for TYPO3 security bypass | CVE-2024-30173

April 3, 2024

NAME__________OpenID Connect Authentication extension for TYPO3 security bypassPlatforms Affected:TYPO3 TYPO3 TYPO3 OpenID Connect Authentication extension for TYPO3 2.0.0 TYPO3 OpenID...

Hikvision NVR Devices denial of service | CVE-2024-29947

April 3, 2024

NAME__________Hikvision NVR Devices denial of servicePlatforms Affected:Hikvision DS-7604NI-K1(B) 4.30.096 build221220Risk Level:2.7Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Hikvision NVR Devices are vulnerable to a...

Apache Pulsar security bypass | CVE-2024-29834

April 3, 2024

NAME__________Apache Pulsar security bypassPlatforms Affected:Apache Pulsar 2.11.0 Apache Pulsar 3.0.0 Apache Pulsar 3.1.0 Apache Pulsar 2.10.5 Apache Pulsar 2.11.3 Apache...

Samsung Mobile devices code execution | CVE-2024-20849

April 3, 2024

NAME__________Samsung Mobile devices code executionPlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

Samsung Mobile devices code execution | CVE-2024-20848

April 3, 2024

NAME__________Samsung Mobile devices code executionPlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

Samsung Mobile devices code execution | CVE-2024-20842

April 3, 2024

NAME__________Samsung Mobile devices code executionPlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

Hikvision NVR Devices command execution | CVE-2024-29949

April 3, 2024

NAME__________Hikvision NVR Devices command executionPlatforms Affected:Hikvision DS-7604NXI-K1/4P 4.76.005 build231012Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Hikvision NVR Devices could allow a remote authenticated attacker...

Samsung Mobile devices code execution | CVE-2024-20846

April 3, 2024

NAME__________Samsung Mobile devices code executionPlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

Samsung Mobile devices security bypass | CVE-2024-20847

April 3, 2024

NAME__________Samsung Mobile devices security bypassPlatforms Affected:Samsung Mobile Device Android 12 Samsung Mobile Device Android 13 Samsung Mobile Device Android 14Risk...

VMware SD-WAN Orchestrator open redirect | CVE-2024-22248

April 3, 2024

NAME__________VMware SD-WAN Orchestrator open redirectPlatforms Affected:VMware SD-WAN Orchestrator 5.0Risk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________VMware SD-WAN Orchestrator could allow a remote attacker to...

Hikvision NVR Devices denial of service | CVE-2024-29948

April 3, 2024

NAME__________Hikvision NVR Devices denial of servicePlatforms Affected:Hikvision DS-7604NXI-K1/4P 4.76.005 build231012Risk Level:3.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Hikvision NVR Devices are vulnerable to a...

Month: April 2024

VMware SD-WAN Edge command execution | CVE-2024-22246

Computer Laboratory Management System security bypass | CVE-2024-3139

Computer Laboratory Management System cross-site scripting | CVE-2024-3140

Samsung Mobile devices code execution | CVE-2024-20843

IOSiX IO-1020 default account | CVE-2024-30210

Samsung Mobile devices information disclosure | CVE-2024-20850

OpenID Connect Authentication extension for TYPO3 security bypass | CVE-2024-30173

Hikvision NVR Devices denial of service | CVE-2024-29947

Apache Pulsar security bypass | CVE-2024-29834

Samsung Mobile devices code execution | CVE-2024-20849

Samsung Mobile devices code execution | CVE-2024-20848

Samsung Mobile devices code execution | CVE-2024-20842

Hikvision NVR Devices command execution | CVE-2024-29949

Samsung Mobile devices code execution | CVE-2024-20846

Samsung Mobile devices security bypass | CVE-2024-20847

VMware SD-WAN Orchestrator open redirect | CVE-2024-22248

Hikvision NVR Devices denial of service | CVE-2024-29948

Samsung Mobile devices security bypass | CVE-2024-20851

VMware SD-WAN Orchestrator security bypass | CVE-2024-22247

8 Base Ransomware Victim: UNDP

8 Base Ransomware Victim: APS – Automotive Parts Solutions

8 Base Ransomware Victim: PWS – The Laundry Company

8 Base Ransomware Victim: YRW Limited – Chartered Accountants

8 Base Ransomware Victim: Lindos Group Of Companies

[EVEREST] – Ransomware Victim: Arctrade

[EVEREST] – Ransomware Victim: MCNA Dental

CISA: Avoid Scams After Disaster Strikes

CISA: Adobe Releases Security Updates for Multiple Products

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

You may have missed