CVE-2024-39891 : TWILIO AUTHY ON ANDROID/IOS API IMPROPER AUTHENTICATION

Description

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data. (Authy accounts were not compromised, however.)

References

https://cwe.mitre.org/data/definitions/203.html

https://www.twilio.com/docs/usage/security/reporting-vulnerabilities

https://www.twilio.com/en-us/changelog

For More Information

CVERecord

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2024-6284 : GOOGLE NFTABLES UP TO 0.1.0 ADDSET INPUT VALIDATION

CVE-2024-6284 : GOOGLE NFTABLES UP TO 0.1.0 ADDSET INPUT VALIDATION

Description In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not

CVE-2024-34750 : APACHE TOMCAT UP TO 9.0.89/10.1.24/11.0.0-M20 HTTP/2 STREAM EXCEPTIONAL CONDITION

CVE-2024-34750 : APACHE TOMCAT UP TO 9.0.89/10.1.24/11.0.0-M20 HTTP/2 STREAM EXCEPTIONAL CONDITION

Description Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did

CVE-2024-35227 : DISCOURSE UP TO 3.3.0.BETA2/3.2.2 URL DENIAL OF SERVICE

CVE-2024-35227 : DISCOURSE UP TO 3.3.0.BETA2/3.2.2 URL DENIAL OF SERVICE

Description Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the