[SECURITY] Fedora 41 Update: python3.6-3.6.15-39.fc41

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

Simple macOS kernel extension fuzzing in userspace with IDA and TinyInst

Posted by Ivan Fratric, Google Project Zero Recently, one of the projects I was involved in had to do with video decoding on Apple platforms, specifically AV1 decoding. On Apple devices that support AV1 video format starting from Apple A17 iOS / M3 macOS, decoding is done in hardware. However,...

[SECURITY] Fedora 41 Update: python3.6-3.6.15-38.fc41

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 40 Update: python3.6-3.6.15-38.fc40

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

AbanteCart 安全漏洞

AbanteCart is AbanteCart open source set of PHP-based e-commerce platform. A security vulnerability exists in AbanteCart version 1.4.0, which originates from a SQL injection vulnerability in the update function in publichtml/admin/controller/responses/listinggrid/collections.php...

CVE-2024-50801

A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update function in publichtml/admin/controller/responses/listinggrid/collections.php. The vulnerability is exploitable via the id parameter...

PT-2024-34412 · Unknown · Abantecart

Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.0 Description: A SQL Injection issue was discovered in the update function within the public html/admin/controller/responses/listing grid/collections.php file. The issue is exploitable via the id parameter...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Apache Commons Collections

Summary Multiple vulnerabilities have been identified in Apache Commons Collections, which is used in IBM Engineering Lifecycle Management - IBM Jazz. This bulletin contains information regarding vulnerabilities and remediation actions. Vulnerability Details CVEID:CVE-2017-15708 DESCRIPTION: Apac...

RHSA-2015:2671 Red Hat Security Advisory: jakarta-commons-collections security update

Bulletin has no description...

RHSA-2015:2523 Red Hat Security Advisory: rh-java-common-apache-commons-collections security update

Bulletin has no description...

RHSA-2015:2522 Red Hat Security Advisory: apache-commons-collections security update

Bulletin has no description...

RHSA-2015:2521 Red Hat Security Advisory: jakarta-commons-collections security update

Bulletin has no description...

RHSA-2022:1664 Red Hat Security Advisory: Red Hat Software Collections security update

Bulletin has no description...

[SECURITY] Fedora 40 Update: python3.6-3.6.15-37.fc40

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

DRUPAL-CONTRIB-2024-036

This module enables field collections to be displayed as tables. It supports display suite and field permissions and provides operations modify, delete, duplicate. This module has multiple vulnerabilities due to the requirements on the routes it provides not being restrictive enough. Information...

CVE-2024-43132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPWeb Elite Docket WooCommerce Collections / Wishlist / Watchlist allows SQL Injection.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

CVE-2024-43132

CVE-2024-43132: Unauthenticated SQL Injection in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) prior to v1.7.0 due to improper neutralization of inputs. Exploitation details are not provided in the initial doc, but Wordfence notes the issue was patched in version 1.7.0. Affe...

[SECURITY] Fedora 40 Update: python3.6-3.6.15-35.fc40

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

PT-2024-30321 · Woocommerce · Docket

Name of the Vulnerable Software and Affected Versions: Docket WooCommerce Collections / Wishlist / Watchlist versions prior to 1.7.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...