Aggregator

CVE-2024-44314 | TastyIgniter 3.7.6 Order Status Orders.php index_onUpdateStatus access control

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in TastyIgniter 3.7.6. Affected by this issue is the function index_onUpdateStatus of the file Orders.php of the component Order Status Handler. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2024-44314. The attack may be launched remotely. There is no exploit available.
vuldb.com

Zero-day broker Operation Zero offers up to $4 million for Telegram exploits

Security Affairs
4 months 2 weeks ago
Russian zero-day broker Operation Zero is looking for exploits for the popular messaging app Telegram, offering up to $4 million for them. Operation Zero, a Russian zero-day broker, is offering up to $4 million for Telegram exploits, the news was first reported by Tech Crunch. The Russian firm seeks up to $500K for one-click RCE, […]
Pierluigi Paganini

CVE-2024-39348 | Synology Router Manager prior 1.2.5-8227-11/1.3.1-9346-8 AirPrint code download (SA_23_16)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Synology Router Manager. It has been rated as critical. Affected by this issue is some unknown functionality of the component AirPrint. The manipulation leads to download of code without integrity check. This vulnerability is handled as CVE-2024-39348. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad