Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2024-4625

Name of the Vulnerable Software and Affected Versions: Node.js versions up to 18.20.3 Node.js versions up to 20.15.0 Node.js versions up to 22.4.0 Description: The issue arises from improper handling of batch files with all possible extensions on Windows via child process.spawn / child...

Malicious code in batch-translations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6758 Malicious code in batch-translations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in batch-insert (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6757 Malicious code in batch-it (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in batch-actions (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in batch-it (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6755 Malicious code in batch-actions (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6756 Malicious code in batch-insert (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in api-batch (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-scaffold_batch_vho (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-22263

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api...

Fedora: Security Advisory for tpm2-tools (FEDORA-2024-0c9d3b51d4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-35232 github.com/huandu/facebook may expose access_token in error message

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...

SUSE CVE-2024-35872

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...

Deploy and Scale Spring Batch in the Cloud – with Adaptive Cost Control

May 21, 2024, at 9 AM PST You can now use Azure Spring Apps to effectively run Spring Batch applications with adaptive cost control. You only pay when batch jobs are running, and you can simply lift and shift your Spring Batch jobs with no code change. Spring Batch is a framework for processing...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

UBUNTU-CVE-2024-35872

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...

SUSE CVE-2024-24576

Rust is a programming language. The Rust Security Response WG was notified that the Rust standard library prior to version 1.77.2 did not properly escape arguments when invoking batch files with the bat and cmd extensions on Windows using the Command. An attacker able to control the arguments...