BIT-PHP-2021-21708 UAF due to php_filter_float() failing

In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...

SUSE CVE-2021-47075

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmetallocctrl When creating ctrl in nvmetallocctrl, if the cntlidmin is larger than cntlidmax of the subsystem, and jumps to the "outfreechangednslist" label, but the ctrl-sqs lack of be freed. Fix this...

DEBIAN-CVE-2021-47075

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmetallocctrl When creating ctrl in nvmetallocctrl, if the cntlidmin is larger than cntlidmax of the subsystem, and jumps to the "outfreechangednslist" label, but the ctrl-sqs lack of be freed. Fix this...

CVE-2024-25677

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

PT-2024-21085 · Git +1 · Min

Name of the Vulnerable Software and Affected Versions: Min versions prior to 1.31.0 Description: The issue arises from local files not being correctly treated as unique security origins, allowing them to improperly request cross-origin resources. For example, a local file may request other local...

Min Security breach

Min is a fast, minimalist browser from Min Open Source. A security vulnerability exists in versions prior to Min 1.31.0, which stems from an incorrect restriction on local files resulting in a security hole...

CVE-2024-25677

CVE-2024-25677 affects Min browser prior to 1.31.0, where local files are not treated as unique security origins, enabling a local file to request other local resources (e.g., via an XML document) and potentially authoring cross-origin access. Concrete details across connected sources show the is...

CVE-2024-25677

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

CVE-2024-25677

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

SUSE CVE-2024-24857

A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service...

SUSE CVE-2024-24858

A race condition was found in the Linux kernel's net/bluetooth in conn,advmin,maxintervalset function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service...

UBUNTU-CVE-2024-24860

A race condition was found in the Linux kernel's bluetooth device driver in min,maxkeysizeset function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue...

CVE-2024-24857

Summary (CVE-2024-24857) : A race condition in the Linux kernel’s net/bluetooth driver function conn_info_{min,max}age_set() may cause an integrity overflow, potentially causing Bluetooth connection abnormalities or DoS. Public sources place this as a kernel issue affecting the Bluetooth subsyste...

CVE-2024-24857 Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service...

CVE-2024-24859 Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

Linux kernel code issue vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a null pointer dereference in the min,maxkeysizeset method of the bluetooth device driver...

Linux kernel Competition Condition Problem Vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a Bluetooth sniffing exception in the sniffmin,maxintervalset method of net/bluetooth...

Sncscan - Tool For Analyzing SAP Secure Network Communications (SNC)

Tool for analyzing SAP Secure Network Communications SNC. How to use? In its current state, sncscan can be used to read the SNC configurations for SAP Router and DIAG SAP GUI connections. The implementation for the SAP RFC protocol is currently in development. SAP Router SAP Routers can either...

min-studenterkorsel.dk Cross Site Scripting vulnerability OBB-3786910

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

M-05 Unmitigated

Lines of code Vulnerability details Original Issue M-05: Reward sandwiching in VotiumStrategy Details The issue outlined above is about making instant profit by depositing before the boost happens and withdrawing right after the boost occurs. Those who locked their positions for 16+ weeks get the...