git: Git: Arbitrary code execution via unsafe submodule metadata during recursive clones

A flaw was found in Git. Unsafe handling of submodule-related repository metadata during recursive clone operations can lead to arbitrary code execution. A remote attacker could exploit this vulnerability by supplying a crafted repository that triggers unauthorized command execution on the host system when cloned recursively.

Insufficient Granularity of Access Control in Git

Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked unsafe

Out-of-bounds Write in Git

Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures

Out-of-bounds Read in Git

Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size

Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).

A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password

TIBCO Platform’s Self-Hosted Control Plane - Authentication Bypass Vulnerability

Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control Plane. This issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21.

Windows Text Services Framework Elevation of Privilege Vulnerability

Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Windows Installer Elevation of Privilege Vulnerability

Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Windows COM+ Event System Service Information Disclosure Vulnerability

Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Windows Schannel Remote Code Execution Vulnerability

Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

Authenticated command injection

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass and PowerShell command injection vulnerability that allowed authenticated non-administrative users to target unauthorized Windows DHCP subnets and potentially execute arbitrary commands on managed Windows DHCP servers through crafted DNS suffix values.

Multi-Factor Authentication Bypass in Hyper Technology's Hyper E-Commerce Infrastructure

Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.

Broken Access Control

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability that allowed authenticated non-administrative users to modify DHCP options on subnets belonging to unauthorized clusters.

braindecode Model Config Deserialization util.py resolve_type_kwargs externally-controlled input to select classes or code

A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolve_type_kwargs of the file braindecode/models/util.py of the component Model Config Deserialization. Such manipulation of the argument Activation leads to use of externally-controlled input to select classes or code. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is 05b764d93b9a50400f523206fbe03d73d0cf5edb. The affected component should be upgraded.

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.