B&R Automation Runtime Security Vulnerabilities

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, rabbitmq-messaging-topology-operator, thanos-operator, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, istio-operator, filebeat, kaf, nri-discovery-kubernetes, nri-kubernetes,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, spicedb, docker-cli, swagger, telegraf, kaf, influx, rekor, direnv, velero, yq, gitness, ip-masq-agent, external-dns, kafka_exporter, falcoctl, wazero, kubescape, nsc, coredns,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, fuse-overlayfs-snapshotter,....

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, rabbitmq-messaging-topology-operator, thanos-operator, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, istio-operator, filebeat, kaf, nri-discovery-kubernetes, nri-kubernetes,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, temporal, aactl, nri-mssql, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, cortex, eksctl, pulumi, crossplane, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, local-path-provisioner, rekor, vault-csi-provider,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, spicedb, docker-cli, swagger, telegraf, kaf, influx, rekor, direnv, velero, yq, gitness, ip-masq-agent, external-dns, kafka_exporter, falcoctl, wazero, kubescape, nsc, coredns,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, caddy,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: slsa-verifier, tekton-chains, skaffold, spire-server, policy-controller, flux-source-controller, pulumi-language-yaml, aactl, melange, flux-image-automation-controller, goreleaser, wolfictl, vexctl, kaniko, crossplane-provider-aws, terraform-provider-google,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, fuse-overlayfs-snapshotter,....

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, caddy,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, temporal, aactl, nri-mssql, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, cortex, eksctl, pulumi, crossplane, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, local-path-provisioner, rekor, vault-csi-provider,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

Exploit for CVE-2024-24919

**Check Point Security Gateway RCE Exploit Tool...

Ars0N-Framework - A Modern Framework For Bug Bounty Hunting

Howdy! My name is Harrison Richardson, or rs0n (arson) when I want to feel cooler than I really am. The code in this repository started as a small collection of scripts to help automate many of the common Bug Bounty hunting processes I found myself repeating. Over time, I built a simple web...

New banking trojan “CarnavalHeist” targets Brazil with overlay attacks

Since February 2024, Cisco Talos has been observing an active campaign targeting Brazilian users with a new banking trojan called "CarnavalHeist." Many of the observed tactics, techniques and procedures (TTPs) are common among other banking trojans coming out of Brazil. This family has also been...

Exploit for CVE-2024-24919

CVE-2024-24919 An Vulnerability detection and Exploitation...

Exploit for CVE-2024-24919

CVE-2024-24919 PoC (but its a CLI) Disclaimer: I am not...

Aquatronica Control System 5.1.6 - Information Disclosure

...

changedetection 0.45.20 Remote Code Execution

...

changedetection < 0.45.20 - Remote Code Execution (RCE)

...

CVE-2024-36029

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-msm: pervent access to suspended controller Generic sdhci code registers LED device and uses host->runtime_suspended flag to protect access to it. The sdhci-msm driver doesn't set this flag, which causes a crash when....

Attackers are impersonating a road toll payment processor across the U.S. in phishing attacks

My wife (no stranger to weird types of scams) recently received a fake text message from someone claiming to be New Jersey's E-ZPass program saying that she had an outstanding balance from highway tolls that she owed, prompting her to visit a site so she could pay and avoid additional fines. There....

Exploit for CVE-2024-24919

CVE-2024-24919......

CVE-2024-36951

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: range check cp bad op exception interrupts Due to a CP interrupt bug, bad packet garbage exception codes are raised. Do a range check so that the debugger and runtime do not receive garbage codes. Update the user api...

CVE-2024-36951

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: range check cp bad op exception interrupts Due to a CP interrupt bug, bad packet garbage exception codes are raised. Do a range check so that the debugger and runtime do not receive garbage codes. Update the user api...

CVE-2024-36928

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set for the first time on an IQD Layer3 device while the corresponding network interface is already UP, the kernel will try to execute a napi...

CVE-2024-36928

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set for the first time on an IQD Layer3 device while the corresponding network interface is already UP, the kernel will try to execute a napi...

CVE-2024-36951 drm/amdkfd: range check cp bad op exception interrupts

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: range check cp bad op exception interrupts Due to a CP interrupt bug, bad packet garbage exception codes are raised. Do a range check so that the debugger and runtime do not receive garbage codes. Update the user api...

CVE-2024-36928 s390/qeth: Fix kernel panic after setting hsuid

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set for the first time on an IQD Layer3 device while the corresponding network interface is already UP, the kernel will try to execute a napi...

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)

_ Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? __Researchers can earn up to $10,400, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the...

CVE-2024-36029 mmc: sdhci-msm: pervent access to suspended controller

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-msm: pervent access to suspended controller Generic sdhci code registers LED device and uses host->runtime_suspended flag to protect access to it. The sdhci-msm driver doesn't set this flag, which causes a crash when....

(RHSA-2024:3483) Moderate: Red Hat Ansible Automation Platform 2.4 Container Security and Bug Fix Update

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2024-1732)

The remote host is missing an update for the Huawei...

CVE-2024-36951

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: range check cp bad op exception interrupts Due to a CP interrupt bug, bad packet garbage exception codes are raised. Do a range check so that the debugger and runtime do not receive garbage codes. Update the user api...

Ubuntu: Security Advisory (USN-6797-1)

The remote host is missing an update for...

CVE-2024-36928

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set for the first time on an IQD Layer3 device while the corresponding network interface is already UP, the kernel will try to execute a napi...

Aquatronica Control System 5.1.6 Password Disclosure

...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2024-1721)

The remote host is missing an update for the Huawei...

ORing IAP-420 2.01e Cross Site Scripting / Command Injection

...

Aquatronica Control System 5.1.6 Passwords Leak Vulnerability

Title: Aquatronica Control System 5.1.6 Passwords Leak Vulnerability Advisory ID: ZSL-2024-5824 Type: Local/Remote Impact: Security Bypass, Privilege Escalation, System Access, DoS, Exposure of System Information, Exposure of Sensitive Information, Manipulation of Data Risk: (5/5) Release Date:...

Exploit for Injection in Glpi-Project Glpi

Exploit Script Utility...