CVE-2024-43826

In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL -fmapping that protects against truncations and can lead to kernel crashes. E.g. when running...

CVE-2024-43826 nfs: pass explicit offset/count to trace events

In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL -fmapping that protects against truncations and can lead to kernel crashes. E.g. when running...

CVE-2024-43826

In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL -fmapping that protects against truncations and can lead to kernel crashes. E.g. when running...

AZL-47962 CVE-2024-42302 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot-removal of the same portion of the hierarchy: The dpchandler awaits readiness of the seconda...

UBUNTU-CVE-2024-42302

In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot-removal of the same portion of the hierarchy: The dpchandler awaits readiness of the seconda...

OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda

OpenAI on Friday said it banned a set of accounts linked to what it said was an Iranian covert influence operation that leveraged ChatGPT to generate content that, among other things, focused on the upcoming U.S. presidential election. "This week we identified and took down a cluster of ChatGPT...

Cross Site Scripting(XSS)

Trix editor is vulnerable to Cross Site Scripting. The vulnerability is due to improper handling of text/html content types in the dataTransfer object during paste events, allowing attackers to execute arbitrary JavaScript by tricking users into pasting malicious code...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-6931)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6931 advisory. - A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be...

CVE-2024-39825

creationtimestamp| type| source ---|---|--- 2024-08-13 22:27:44+00:00| seen| https://t.me/CyberBulletin/368 2024-08-14 19:54:15+00:00| seen| https://t.me/cvedetector/3186...

CVE-2024-7590

creationtimestamp| type| source ---|---|--- 2024-08-13 01:12:09+00:00| seen| https://t.me/cvedetector/2908 2025-03-02 11:46:30+00:00| seen| Telegram/JaXSRh3APqE6ZCb9isHnlsJFAY2cy1aT0relWEV4ZMj2biFL...

CVE-2024-33533

creationtimestamp| type| source ---|---|--- 2024-08-12 18:27:19+00:00| seen| https://t.me/cvedetector/2851 2024-08-16 10:20:55+00:00| published-proof-of-concept| https://t.me/HackingInsights/10031 2024-08-16 11:49:15+00:00| seen| https://t.me/CyberBulletin/397 2026-07-09 03:00:13+00:00| seen|...

CVE-2024-5668

creationtimestamp| type| source ---|---|--- 2024-08-08 08:01:56+00:00| seen| https://t.me/cvedetector/2752 2025-03-02 11:46:30+00:00| seen| Telegram/stTzviPZctL7T0hK0bTelnCmoZFmF7zb9LRpKX4aMvk8Yadz...

kernel: drm/vmwgfx: Fix invalid reads in fence signaled events

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drmevent to the size of the structure that's actually used. The length of the drmevent was set to the parent structure instead of to the...

kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload

A flaw was found in the Linux kernel. A race condition in network bridge management could lead to a denial of service...

CVE-2024-6552

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2. This is due to the plugin utilizing Symfony and leaving displayerrors on within test files. This makes it possible for unauthenticated...

CVE-2024-7553

creationtimestamp| type| source ---|---|--- 2024-08-07 12:47:24+00:00| seen| https://t.me/cvedetector/2677 2024-08-10 21:41:30+00:00| seen| https://t.me/HackingInsights/9239...

WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin Registrations for the Events Calendar versions = 2.12.1...

CVE-2024-6522

The Modern Events Calendar plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.12.1 via the 'mecfesform' AJAX function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitra...

CVE-2024-6522

The Modern Events Calendar plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.12.1 via the 'mecfesform' AJAX function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitra...

CVE-2024-6522

CVE-2024-6522 – Normal mode Affected software: Modern Events Calendar (WordPress) and Modern Events Calendar Lite. Root cause: Server-Side Request Forgery (SSRF) via the mec_fes_form AJAX function, affecting all versions up to 7.12.1. Impact: Authenticated attackers with Subscriber-level access a...