Kohya_ss command injection vulnerability

Kohya is a repository for bmaltais individual developers. A security vulnerability exists in Kohyass versions v22.6.1 through v23.1.3, which stems from a command injection vulnerability in groupimagesgui.py...

CVE-2024-21087: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

PT-2024-24363

Name of the Vulnerable Software and Affected Versions Kohya ss versions prior to 23.1.5 Description Kohya ss, a GUI for Kohya's Stable Diffusion trainers, is vulnerable to a command injection in the group images gui.py file. Recommendations For versions prior to 23.1.5, update to version 23.1.5 t...

smartex-group.com Cross Site Scripting vulnerability OBB-3917826

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Change Healthcare Faces Another Ransomware Threat—and It Looks Credible

Change Healthcare ransomware hackers already received a $22 million payment. Now a second group is demanding money, and it has sent WIRED samples of what they claim is the company's stolen data...

CVE-2024-22734

The AMCS Group Trux Waste Management Software (versions prior to 7.19.0018.26912 ) contains a critical vulnerability where local attackers can obtain sensitive information. The root cause is a static, hard-coded AES Key-IV pair located within the TxUtilities.dll and TruxUser.cfg components. This ...

CVE-2024-22734: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components...

CVE-2024-22734

An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components...

CVE-2024-22722

Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...

Apple warns people of mercenary attacks via threat notification system

Apple has reportedly sent alerts to individuals in 92 nations on Wednesday, April 10, to say its detected that they may have been a victim of a mercenary attack. The company says it has sent out these types of threat notifications to over 150 countries since the start in 2021. Mercenary spyware i...

scottishmicroscopygroup.org.uk Cross Site Scripting vulnerability OBB-3914406

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

next-group-hd.co.jp Cross Site Scripting vulnerability OBB-3914054

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2024-26772

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4mbfindbygoal Places the logic for checking if the group's block bitmap is corrupt under the protection of the group lock to avoid allocating blocks from the group with a...

SUSE CVE-2024-26773

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4mbtrybestfound Determine if the group block bitmap is corrupted before using acbex in ext4mbtrybestfound to avoid allocating blocks from a group with a corrupted block...

CVE-2024-22722: Improper Control of Generation of Code

Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...

PT-2024-19542

Name of the Vulnerable Software and Affected Versions Form Tools version 3.1.1 Description A Server Side Template Injection SSTI issue allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. Recommendations For Form Tools version 3.1.1,...

Form Tools security vulnerabilities

Form Tools is an open source code base for Form Tools scripts, modules, themes and APIs. A security vulnerability exists in Form Tools version 3.1.1 that originates from allowing an attacker to run arbitrary commands through the Group Name field under the Add Form section of the application...

CVE-2024-22722

Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...

CVE-2024-22722

A Server Side Template Injection (SSTI) vulnerability exists in Form Tools version 3.1.1 . This flaw allows attackers to execute arbitrary commands by exploiting the Group Name field within the application's add forms section. Publicly available proof-of-concept scripts, such as those found on Gi...

CVE-2021-47209 sched/fair: Prevent dead task groups from regaining cfs_rq's

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining cfsrq's Kevin is reporting crashes which point to a use-after-free of a cfsrq in updateblockedaverages. Initial debugging revealed that we've live cfsrq's onlist=1 in an about t...