RedPacket Security - InfoSec News & Tutorials

Yealink Configuration Encrypt Tool information disclosure | CVE-2024-24681

February 23, 2024

NAME__________Yealink Configuration Encrypt Tool information disclosurePlatforms Affected:Yealink Configuration Encrypt Tool 1.1Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Yealink Configuration Encrypt Tool could allow a...

cryptography denial of service | CVE-2024-26130

February 23, 2024

NAME__________cryptography denial of servicePlatforms Affected:Python Cryptographic Authority cryptography 42.0.4Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________cryptography is vulnerable to a denial of service,...

GitLab security bypass | CVE-2023-3509

February 23, 2024

NAME__________GitLab security bypassPlatforms Affected:GitLab GitLab 16.8 GitLab GitLab 16.9Risk Level:3.7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________GitLab could allow a remote authenticated attacker to bypass...

Mozilla Firefox for iOS cross-site scripting | CVE-2024-26283

February 23, 2024

NAME__________Mozilla Firefox for iOS cross-site scriptingPlatforms Affected:Mozilla Firefox for iOS 122Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Mozilla Firefox for iOS is vulnerable to...

GitLab Enterprise Edition security bypass | CVE-2024-0861

February 23, 2024

NAME__________GitLab Enterprise Edition security bypassPlatforms Affected:GitLab Enterprise Edition 16.4.0 GitLab Enterprise Edition 16.8 GitLab Enterprise Edition 16.9Risk Level:4.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________GitLab...

VMware Aria Operations privilege escalation | CVE-2024-22235

February 23, 2024

NAME__________VMware Aria Operations privilege escalationPlatforms Affected:VMware Aria Operations 8 VMware Cloud Foundation (VMware Aria Operations) 5 VMware Cloud Foundation (VMware...

GitLab security bypass | CVE-2024-0410

February 23, 2024

NAME__________GitLab security bypassPlatforms Affected:GitLab GitLab 15.1 GitLab GitLab 16.8 GitLab GitLab 16.9Risk Level:7.7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________GitLab could allow a remote authenticated...

Apache Answer security bypass | CVE-2024-26578

February 23, 2024

NAME__________Apache Answer security bypassPlatforms Affected:Apache Answer 1.2.1Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Apache Answer could allow a remote attacker to bypass security restrictions,...

Linux Kernel denial of service | CVE-2024-26583

February 23, 2024

NAME__________Linux Kernel denial of servicePlatforms Affected:Linux Kernel 5.7.0 Linux Kernel 6.8-rc4Risk Level:5.1Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a...

Apache Answer cross-site scripting | CVE-2024-23349

February 23, 2024

NAME__________Apache Answer cross-site scriptingPlatforms Affected:Apache Answer 1.2.1Risk Level:5.4Exploitability:HighConsequences:Denial of Service DESCRIPTION__________Apache Answer is vulnerable to cross-site scripting, caused by improper...

Apache Answer denial of service | CVE-2024-22393

February 23, 2024

NAME__________Apache Answer denial of servicePlatforms Affected:Apache Answer 1.2.1Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Apache Answer is vulnerable to a denial of service,...

Linux Kernel denial of service | CVE-2024-26585

February 23, 2024

NAME__________Linux Kernel denial of servicePlatforms Affected:Linux Kernel 4.20 Linux Kernel 6.8-rc4Risk Level:5.1Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a...

Linux Kernel denial of service | CVE-2024-26584

February 23, 2024

NAME__________Linux Kernel denial of servicePlatforms Affected:Linux Kernel 4.16 Linux Kernel 6.8-rc4Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a...

Silicon Labs PC Controller denial of service | CVE-2023-6640

February 23, 2024

NAME__________Silicon Labs PC Controller denial of servicePlatforms Affected:Silicon Labs PC Controller 5.54.0Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Silicon Labs PC Controller is...

Delta Electronics CNCSoft-B DOPSoft code execution | CVE-2024-1595

February 23, 2024

NAME__________Delta Electronics CNCSoft-B DOPSoft code executionPlatforms Affected:Delta Electronics CNCSoft-B DOPSoft 1.0.0.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Delta Electronics CNCSoft-B DOPSoft could allow a...

GitLab Enterprise Edition information disclosure | CVE-2023-4895

February 23, 2024

NAME__________GitLab Enterprise Edition information disclosurePlatforms Affected:GitLab Enterprise Edition 12.0 GitLab Enterprise Edition 16.8 GitLab Enterprise Edition 16.9Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________GitLab...

Main Story

Editor’s Picks

Trending Story

Featured Story

You may have missed