PT-2022-31102

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists in the SCSI I/O completion and abort handler, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

o-bible.com Cross Site Scripting vulnerability OBB-2684795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tel-o-fun.co.il Cross Site Scripting vulnerability OBB-2674646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AZL-39668 CVE-2022-29526 affecting package cri-o for versions less than 1.21.7-2

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

o-review.com Cross Site Scripting vulnerability OBB-2662347

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-4992 Malicious code in o-ads-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e617444fa6eff36ff9ae61eef4ce48b59a35c4e7f8f9c6a26159b22bde1cb6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-ads-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e617444fa6eff36ff9ae61eef4ce48b59a35c4e7f8f9c6a26159b22bde1cb6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-cookie-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2afb37a96b3b8571839e5b1086cd86c90d681149e61d58ca541b6bc2cf79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4995 Malicious code in o-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 656f96d263183b67639a364665bcbc6f5ec7a73bca04af5336963724bdf8d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4994 Malicious code in o-cookie-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2afb37a96b3b8571839e5b1086cd86c90d681149e61d58ca541b6bc2cf79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa01c0a676d541309335055fc92d44600bb8e0434908efe65fd45f100a77cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4996 Malicious code in o-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa01c0a676d541309335055fc92d44600bb8e0434908efe65fd45f100a77cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fddcdd51b3f457d1b6c813c74ebafd8917c5ba226abce1761036485a0d97ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-autoinit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aecd8c645b6cdacddb29937119fd589d31244b447ceedde088a1dd5e19ad935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4991 Malicious code in o-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fddcdd51b3f457d1b6c813c74ebafd8917c5ba226abce1761036485a0d97ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

g-o-c.de Cross Site Scripting vulnerability OBB-2654859

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Intel® Processors MMIO Undefined Access Advisory

Summary: A potential security vulnerability in Memory Mapped I/O MMIO for some 14nm Client/Xeon E3 Intel® Processors may allow a denial of service in certain virtualized environments. Vulnerability Details: CVEID: CVE-2022-21180 Description: Improper input validation for some Intel® Processors ma...

cri-o: memory exhaustion on the node when access to the kube api

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

PT-2025-26024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash in the Linux kernel has been resolved, related to the scsi: qla2xxx module. The issue occurs due to stale SRB access around I/O timeouts. To fix this, the code now ensures that t...

cri-o: memory exhaustion on the node when access to the kube api

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...