CVE-2024-56532 ALSA: us122l: Use snd_card_free_when_closed() at disconnection

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...

CVE-2024-53169 nvme-fabrics: fix kernel crash while shutting down controller

In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix kernel crash while shutting down controller The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race betwe...

Researchers Uncover Dark Web Operation Entirely Focused on KYC Bypass

iProov uncovers a major Dark Web operation selling stolen identities with matching biometrics, posing a serious threat to KYC verification systems...

LockBit Developer Rostislav Panev Charged for Billions in Global Ransomware Damages

A dual Russian and Israeli national has been charged in the United States for allegedly being the developer of the now-defunct LockBit ransomware-as-a-service RaaS operation since its inception in or around 2019 through at least February 2024. Rostislav Panev , 51, was arrested in Israel earlier...

Lazarus group evolves its infection chain with old and new malware

Over the past few years, the Lazarus group has been distributing its malicious software by exploiting fake job opportunities targeting employees in various industries, including defense, aerospace, cryptocurrency, and other global sectors. This attack campaign is called the DeathNote campaign and...

kernel: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver for the w83793 module where NULL pointer dereference caused by an obsolete structure field lm75. During specific device read operations, if certain values are read from the device, the driver could attempt to access a NULL pointer,...

5 million payment card details stolen in painful reminder to monitor Christmas spending

Another day, another exposed S3 bucket. This time, 5 million US credit cards and personal details were leaked online. The Leakd.com security team discovered that 5 terabytes of sensitive screenshots were exposed in a freely accessible Amazon S3 bucket. An S3 bucket is like a virtual file folder i...

CVE-2024-8475 Protection Mechanism Failure in Digital Operation Services' WiFiBurada

Authentication Bypass by Assumed-Immutable Data vulnerability in Digital Operation Services WiFiBurada allows Manipulating User-Controlled Variables. This issue affects WiFiBurada: before 1.0.5...

CVE-2024-8475

CVE-2024-8475 affects Digital Operation Services’ WiFiBurada prior to version 1.0.5. The issue is described as an Authentication Bypass by Assumed-Immutable Data, enabling manipulation of user‑controlled variables. Documented impact is limited to authentication bypass with no explicit exploitatio...

Digital Operation Services WiFiBurada 安全漏洞

Digital Operation Services WiFiBurada is an application from Digital Operation Services, Inc. A security vulnerability exists in Digital Operation Services WiFiBurada that stems from the inclusion of an authentication bypass vulnerability...

Digital Operation Services WiFiBurada 安全漏洞

Digital Operation Services WiFiBurada is an application from Digital Operation Services, Inc. A security vulnerability exists in Digital Operation Services WiFiBurada that stems from improperly limiting excessive authentication attempts...

BIT-NODE-MIN-2024-22017

setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...

Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes

The Security Service of Ukraine SBU or SSU has exposed a novel espionage campaign suspected to be orchestrated by Russia's Federal Security Service FSB that involves recruiting Ukrainian minors for criminal activities under the guise of "quest games." Law enforcement officials said that it detain...

[SECURITY] Fedora 40 Update: linux-firmware-20241210-1.fc40

This package includes firmware files required for some devices to operate...

[SECURITY] Fedora 41 Update: linux-firmware-20241210-1.fc41

This package includes firmware files required for some devices to operate...

PT-2025-3667 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises in the Linux kernel's netfs subsystem, specifically when handling the copy to cache on write-begin operation for ceph filesystems. At the end of netfs unlock read foli...

JFinalCMS Cross-Site Request Forgery Vulnerability (CNVD-2024-49644)

JFinalCMS is a content management system. A cross-site request forgery vulnerability exists in JFinalCMS version 1.0, which stems from the /admin/tag/save file not adequately verifying that a request comes from a trusted user. An attacker can exploit this vulnerability to forge a malicious reques...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53052)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53052 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fix missing NOWAIT check for...

Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested

A global law enforcement operation has failed 27 stresser services that were used to conduct distributed denial-of-service DDoS attacks and took them offline as part of a multi-year international exercise called PowerOFF. The effort, coordinated by Europol and involving 15 countries, dismantled...

PT-2025-3668 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the exfat component of the Linux kernel, where a new buffer was not zeroed before writing. This could lead to uninitialized data in the page cache being written. The...