8384 matches found
PT-2025-42736
Name of the Vulnerable Software and Affected Versions golang versions 1.15 golang versions 1.19 Description The net/url package does not properly validate bracketed IPv6 hostnames. This can lead to issues when parsing URLs containing IPv6 addresses enclosed in brackets. Recommendations Update to ...
CVE-2024-56800
Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery SSRF vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address...
CVE-2024-56692 f2fs: fix to do sanity check on node blkaddr in truncate_node()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncatenode syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2534! RIP: 0010:f2fsinvalidateblocks+0x35f/0x370...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from insufficient integrity checking of node block addresses in the truncatenode function in the f2fs module...
UBUNTU-CVE-2024-56559
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...
CVE-2024-56559 mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...
CVE-2024-56559
CVE-2024-56559 : Linux kernel vulnerability in vmalloc/KASAN shadow VA handling where the TLB flush of multiple uses was not consolidated, causing a soft lockup on a 256-core machine during drain_vmap_area_work and Kasan vmap allocations. The issue is resolved by combining all TLB flush operation...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from not properly releasing dynamic addresses in the i3cmasterputi3caddrs function in the i3c module...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a TLB refresh operation issue with KASAN shadow virtual addresses in the mm/vmalloc subsystem...
The vulnerability of the Happy Eyeballs sorting algorithm for Envoy proxy servers allows a hacker to trigger a service denial.
The vulnerability of the Happy Eyeballs sorting algorithm for the Envoy proxy server is related to the incorrect implementation of the control flow when processing IP addresses. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
SUSE CVE-2024-53269
Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm will crash in data plane. This issue has been addressed in releases 1.32.2, 1.31.4, and 1.30.8. Users are advised to upgrade. Users unable to...
The vulnerability of the Dell ECS storage platform lies in the redirection of the URL to an unreliable website, allowing a hacker to redirect users to any given URL address.
The vulnerability of the Dell ECS storage platform relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a hacker to redirect users to arbitrary URL addresses...
ALSA-2024:11486 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout CVE-2024-27399 kernel: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in BPFLINKCREATE CVE-2024-38564 kernel: bpf: Fix a...
PT-2024-35378 · Misskey · Misskey
Name of the Vulnerable Software and Affected Versions: Misskey versions prior to 2024.11.0-alpha.3 Description: Misskey is an open source, federated social media platform. Some APIs using HttpRequestService do not properly check the target host. This issue allows an attacker to send POST or GET...
Envoy Proxy 安全漏洞
Envoy Proxy is a cloud-native, high-performance edge/intermediate/service proxy open-sourced by Envoy Proxy. A security vulnerability exists in Envoy Proxy that stems from a sorting algorithm that crashes in the data plane when other addresses are not IP addresses...
Fedora 40 : python3.10 (2024-1a493abc67)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1a493abc67 advisory. Python 3.10.16 security release. Security content in this release -------------------------------- - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to...
About the security content of macOSVentura13.7.2
About the security content of macOSVentura13.7.2 This document describes the security content of macOS Ventura 13.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
SUSE: Security Advisory (SUSE-SU-2024:4165-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JSFinder 安全漏洞
JSFinder is a tool used by Threezh1 to quickly extract URLs and subdomains from js files on websites. A security vulnerability exists in JSFinder due to a directory traversal vulnerability in the findbyfile function...