3061 matches found
DEBIAN-CVE-2024-41029
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: limit cell sysfs permissions to main attribute ones The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvmeconfig::rootonly was set, the cell...
UBUNTU-CVE-2024-41029
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: limit cell sysfs permissions to main attribute ones The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvmeconfig::rootonly was set, the cell...
The vulnerability of the hnap_main function in the D-LINK GO-RT-AC750 router software allows a hacker to cause a service failure.
The vulnerability of the hnapmain function in the D-LINK GO-RT-AC750 router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted POST reques...
PYSEC-2024-322
JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...
Cookie Tossing
Overview Affected versions of this package are vulnerable to Cookie Tossing due to a missing Host- prefix on the gitpodiojwt2 session cookie. This allows an adversary who controls a subdomain to set the value of the cookie on the Gitpod control plane, which can be assigned to an attacker’s own JW...
PT-2024-20224 · Unknown · Lukas Bach
Name of the Vulnerable Software and Affected Versions: Lukas Bach yana version 1.0.16 Description: The issue is related to Cross Site Scripting XSS via src/electron-main.ts. Recommendations: For version 1.0.16, update to a version that is 1.0.16 or later to resolve the issue. As a temporary...
Yana Security Breach
Yana is a powerful laptop application from the individual developer Lukas Bach. A security vulnerability exists in Yana version 1.0.16 and prior versions, which stems from a cross-site scripting vulnerability in the src/electron-main.ts location...
CVE-2024-6470: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...
CVE-2024-6469: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...
OESA-2024-1759 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A null pointer...
OESA-2024-1761 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A null pointer...
PT-2024-25204 · Lumisxp · Lumisxp
Name of the Vulnerable Software and Affected Versions: Lumisxp versions 15.0.x through 16.1.x Description: A cross-site scripting XSS issue in the main.jsp component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the pageId parameter. Recommendations...
Malicious code in test-package-main-dist (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in whach-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homee2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3923 Malicious code in watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homees4 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3922 Malicious code in watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homees (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in watch-tu-jhoothi-main-makkar-2023-on-fullmovies-online-streaming-at-homes (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in watch-tu-jhoothi-main-makkaar-2023-hd-4k (npm)
--- -= Per source details. Do not edit below this line.=-...