236 matches found
GSD-2022-1007193 net: sched: cake: fix null pointer access issue when cake_init() fails
net: sched: cake: fix null pointer access issue when cakeinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1006977 net: sched: cake: fix null pointer access issue when cake_init() fails
net: sched: cake: fix null pointer access issue when cakeinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.76 by commit...
GSD-2022-1006677 net: sched: cake: fix null pointer access issue when cake_init() fails
net: sched: cake: fix null pointer access issue when cakeinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
PT-2022-35232 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
PT-2022-35731 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue is related to a null pointer access in the cake init function. This problem was introduced in version v4.19 and is fixed in version v4.19.264. The actual impact and attack...
PT-2022-34932 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a null pointer access in the cake init function. It was introduced in version v4.19 and fixed in version v6.0.6. The actual impact and attack plausibility have not yet...
PT-2022-35448 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
PT-2022-35614 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.221 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
Linux Kernel Net Scheduler Use-After-Free Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
Cake DeFi Added Ethereum Staking Service to Allow Unstaking Anytime
By Waqas Singapore’s fastest-growing Fintech firm Cake DeFi has added Ethereum Staking service to its platform with 5 percent returns… This is a post from HackRead.com Read the original post: Cake DeFi Added Ethereum Staking Service to Allow Unstaking Anytime...
Malicious Package
Overview pancake-cake-vault is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...
Malicious code in pancake-cake-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4911af300b562bcf8849d8ac6a0764e01ecb653a7f3bc39955b489a5ce1efd89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5201 Malicious code in pancake-cake-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4911af300b562bcf8849d8ac6a0764e01ecb653a7f3bc39955b489a5ce1efd89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
niaru-cake.com Cross Site Scripting vulnerability OBB-2155741
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2024-11250 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The TCP option parser in the Linux kernel's cake qdisc could read one byte out of bounds when parsing TCP options and headers. This occurs when the length is 1, and the execution flow...
Hangzhou Zhicong Network Technology Co., Ltd's Rice Cake Mom APP Has Denial of Service Vulnerability
Rice Cake Mom APP is a professional mother and baby service application. Hangzhou Zhicong Network Technology Co., Ltd. rice cake mom APP has a denial of service vulnerability, attackers can send malformed packets to exploit the vulnerability to cause the APP stop running...
cake-cake.net XSS vulnerability
Open Bug Bounty ID: OBB-703493 Description| Value ---|--- Affected Website:| cake-cake.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Cake Marketing - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Cake Marketing published at the 'play' market has multiple vulnerabilities...
Crazy Cake Swap - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Crazy Cake Swap published at the 'play' market has multiple vulnerabilities...
Princess Cake - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Princess Cake published at the 'play' market has multiple vulnerabilities...