threatintel

CVE Alert: CVE-2024-20465

September 26, 2024

Vulnerability Summary: CVE-2024-20465 A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial...

CVE Alert: CVE-2024-20467

September 26, 2024

Vulnerability Summary: CVE-2024-20467 A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could...

CVE Alert: CVE-2024-20510

September 26, 2024

Vulnerability Summary: CVE-2024-20510 A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers...

CVE Alert: CVE-2024-20464

September 26, 2024

Vulnerability Summary: CVE-2024-20464 A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an...

CVE Alert: CVE-2024-20475

September 26, 2024

Vulnerability Summary: CVE-2024-20475 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could...

Cloudflare Warns of India-Linked Hackers Targeting South and East Asian Entities

September 26, 2024

An advanced threat actor with an India nexus has been observed using multiple cloud service providers to facilitate credential harvesting,...

Chinese Hackers Infiltrate U.S. Internet Providers in Cyber Espionage Campaign

September 26, 2024

Nation-state threat actors backed by Beijing broke into a "handful" of U.S. internet service providers (ISPs) as part of a...

CVE Alert: CVE-2024-20508

September 26, 2024

Vulnerability Summary: CVE-2024-20508 A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS...

CVE Alert: CVE-2024-20496

September 26, 2024

Vulnerability Summary: CVE-2024-20496 A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated,...

CVE Alert: CVE-2024-8996

September 26, 2024

Vulnerability Summary: CVE-2024-8996 Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from...

CVE Alert: CVE-2024-8975

September 26, 2024

Vulnerability Summary: CVE-2024-8975 Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User...

CVE Alert: CVE-2024-47315

September 26, 2024

Vulnerability Summary: CVE-2024-47315 Cross-Site Request Forgery (CSRF) vulnerability in GiveWP.This issue affects GiveWP: from n/a through 3.15.1. Affected Endpoints: No...

CVE Alert: CVE-2024-46655

September 26, 2024

Vulnerability Summary: CVE-2024-46655 A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the...

CVE Alert: CVE-2023-51157

September 26, 2024

Vulnerability Summary: CVE-2023-51157 Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code...

CVE Alert: CVE-2024-46488

September 26, 2024

Vulnerability Summary: CVE-2024-46488 sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows...

CVE Alert: CVE-2024-47082

September 26, 2024

Vulnerability Summary: CVE-2024-47082 Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support...

CVE Alert: CVE-2024-47305

September 26, 2024

Vulnerability Summary: CVE-2024-47305 Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font allows Cross Site Request Forgery.This issue affects...