Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs explicitly terminating the xattr list with null when setting xattr...

CVE-2023-20577

A vulnerability was found in AMD hardware due to a heap overflow in the SMM module. This issue could allow a local unauthenticated attacker to enable writing to SPI flash to execute arbitrary code. Mitigation Mitigation for this issue is either not available or the currently available options do...

CVE-2023-20587

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

Input validation

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

CVE-2023-20587

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

CVE-2023-20587

A vulnerability exists in AMD hardware due to improper access control in the System Management Mode (SMM) . This flaw may allow a local unauthenticated attacker to gain access to the SPI flash , which could potentially lead to arbitrary code execution . While specific affected versions are not de...

CVE-2023-20587

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

PT-2024-11958 · Unknown · System Management Mode

Name of the Vulnerable Software and Affected Versions: System Management Mode SMM affected versions not specified Description: The issue is related to improper access control in System Management Mode SMM, which may allow an attacker to access the SPI flash, potentially leading to arbitrary code...

PT-2024-2694 · Intel · Intel One Boot Flash Update

Name of the Vulnerable Software and Affected Versions: Intel One Boot Flash Update OFU versions prior to 14.1.31 Description: The issue is related to a protection mechanism failure in the Intel One Boot Flash Update OFU software, which may allow an authenticated user to potentially enable...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 server microprocessor product line from AMD Semiconductor, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC™ Processors. The vulnerability can be exploited to write to the SPI flash memory to execute arbitrary cod...

CVE-2023-20587: Improper Access Control

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

@amplicode/addon-email-templates (>=0.0.1-snapshot.8, <=0.1.0-snapshot.1.6), @dankolz/news-flash (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2024-24815 via ckeditor4 (>=4.14.0, <=4.22.1)

ckeditor4 NPM version =4.14.0, =0.0.1-snapshot.8, =1.0.1, =1.0.0, =1.0.5, =1.0.0, =2.10.93, =2.10.0, =0.0.0, =1.0.36, =1.0.6, =1.0.59 Source cves: CVE-2024-24815 Source advisory: GHSA-FQ6H-4G8V-QQVM...

Electrolink FM/DAB/TV Transmitter - Pre-Auth MPFS Image Remote Code Execution

Electrolink FM/DAB/TV Transmitter Pre-Auth MPFS Image Remote Code Execution Vendor: Electrolink s.r.l. Product web page: https://www.electrolink.com Affected version: 10W, 100W, 250W, Compact DAB Transmitter 500W, 1kW, 2kW Medium DAB Transmitter 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter 100...

SWFTools swf5compiler.flex:327 page buffer overflow vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the countline method on the swf5compiler.flex:327 page that fails to correctly validate the length of input data, and can be exploited by...

SWFTools swfc.c:2587 Page Buffer Overflow Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the parseExpression method on the swftools/src/swfc.c:2587 page that fails to correctly validate the length of the input data, and can be...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a messed up instruction responsible for freeing memory in the swfDeleteTag method on page rfxswf.c:1193. An attacker can exploit this...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the swf5lex method on the lex.swf5.c:1321 page that fails to correctly validate the length of the input data, and can be exploited by an...

CVE-2023-42135

PAX A920Pro/A50 devices with PayDroid8.1.0SagittariusV11.1.5020230614 or earlier can allow local code execution via parameter injection by bypassing the input validation when flashing a specific partition. The attacker must have physical USB access to the device in order to exploit this...

Frequent donations can cause DOS

Lines of code Vulnerability details Impact User's might be unable to withdraw pending rewards Proof of Concept If a donation is made before the checkpoint call in the same block, the checkpoint call will revert. This is done in order to prevent flash loans. function checkpoint external returns bo...

Input Validation for _vote Function

Lines of code Vulnerability details Potential Risk: The vote function in the CultureIndex contract takes two parameters: pieceId and voter. While the function includes some input validation checks, there are some potential issues and missing checks that should be addressed. Proof of Concept PoC:...