Month: October 2024

CVE Alert: CVE-2024-9513

October 5, 2024

Vulnerability Summary: CVE-2024-9513 A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected...

CVE Alert: CVE-2024-9410

October 5, 2024

Vulnerability Summary: CVE-2024-9410 Ada.cx's Sentry configuration allowed for blind server-side request forgeries (SSRF) through the use of a data scraping...

CVE Alert: CVE-2024-25691

October 5, 2024

Vulnerability Summary: CVE-2024-25691 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1, 10.9.1 and 10.8.1 which...

CVE Alert: CVE-2024-47183

October 5, 2024

Vulnerability Summary: CVE-2024-47183 Parse Server is an open source backend that can be deployed to any infrastructure that can run...

CVE Alert: CVE-2024-38036

October 5, 2024

Vulnerability Summary: CVE-2024-38036 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which...

CVE Alert: CVE-2024-47769

October 5, 2024

Vulnerability Summary: CVE-2024-47769 IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using...

CVE Alert: CVE-2024-25707

October 5, 2024

Vulnerability Summary: CVE-2024-25707 There is a reflected cross site scripting in Esri Portal for ArcGIS 11.1 and below on Windows...

[RANSOMHUB] – Ransomware Victim: winwinza[.]com

October 5, 2024

Ransomware Group: RANSOMHUB VICTIM NAME: winwinzacom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...

CVE Alert: CVE-2024-25702

October 5, 2024

Vulnerability Summary: CVE-2024-25702 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.8.1 –...

CVE Alert: CVE-2024-38040

October 5, 2024

Vulnerability Summary: CVE-2024-38040 There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2. 11.1, 11.0 and 10.9.1...

CVE Alert: CVE-2024-25694

October 5, 2024

Vulnerability Summary: CVE-2024-25694 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise versions 10.8.1 – 10.9.1...

CVE Alert: CVE-2024-25701

October 5, 2024

Vulnerability Summary: CVE-2024-25701 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Experience Builder versions 10.8.1...

CVE Alert: CVE-2024-38039

October 5, 2024

Vulnerability Summary: CVE-2024-38039 There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may...

CVE Alert: CVE-2024-38038

October 5, 2024

Vulnerability Summary: CVE-2024-38038 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which...

CVE Alert: CVE-2024-8149

October 5, 2024

Vulnerability Summary: CVE-2024-8149 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and 11.2 which may...

CVE Alert: CVE-2024-47911

October 5, 2024

Vulnerability Summary: CVE-2024-47911 In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint...

CVE Alert: CVE-2024-8148

October 5, 2024

Vulnerability Summary: CVE-2024-8148 There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 10.8.1 - 11.2 that may allow...

CVE Alert: CVE-2024-38037

October 5, 2024

Vulnerability Summary: CVE-2024-38037 There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and 10.9.1 that may allow...

[INCRANSOM] – Ransomware Victim: Storck-Baugesellschaft mbH

October 5, 2024

Ransomware Group: INCRANSOM VICTIM NAME: Storck-Baugesellschaft mbH NOTE: No files or stolen information are by RedPacket Security. Any legal issues...