GHSA-4MHG-XV73-XQ2X Synapse denial of service through media disk space consumption

Impact Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can lead to a denial of service, ranging fro...

Synapse denial of service through media disk space consumption

Impact Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can lead to a denial of service, ranging fro...

Automattic Mongoose 安全漏洞

Automattic Mongoose is a MongoDB object modeling tool for asynchronous environments. A security vulnerability exists in Automattic Mongoose versions prior to 8.8.3 that stems from improper use of query operators...

Important: Red Hat Security Advisory: Control plane Operators for RHOSO 18.0.3 (Feature Release 1) security update

Control plane Operators for RHOSO 18.0.3 Feature Release 1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

CVE-2024-50386 Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...

GHSA-F748-7HPG-88CH vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

Security Bulletin: IBM Observability with Instana using third-party Kubernetes Operators is affected by Multiple Security Vulnerabilities

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana using third-party Kubernetes Operators build 283 Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local authenticated attacker to bypass security restrictions, caused by an incorre...

Malicious code in plugin-transform-logical-assignment-operators (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-9180 Vault Operators in Root Namespace May Elevate Their Privileges

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16...

How to handle vulnerability reports in aviation

TL;DR Always thank researchers for reporting vulnerabilities. Acknowledging their efforts can set the right tone. Lead all communications with researchers. Don’t let legal or PR teams take over. Provide regular updates to avoid miscommunication. Keep researchers informed throughout the process. W...

PT-2024-7519

Name of the Vulnerable Software and Affected Versions python-sql affected versions not specified Description A vulnerability was found in python-sql where unary operators do not escape non-Expression, such as And and Or. This makes any system exposing those vulnerable to an SQL injection attack,...

September 10, 2024—KB5043067 (OS Build 22000.3197)

None None...

CVE-2024-34158 vulnerabilities

Vulnerabilities for packages: wave, opentelemetry-collector-contrib-fips, zot, amass, helm-operator-fips, bank-vaults-fips, wavefront-collector-for-kubernetes, boring-registry, yace, nats-server, rabbitmq-messaging-topology-operator-fips, whereabouts-fips, kube-bench-fips,...

[SECURITY] Fedora 40 Update: onnx-1.14.1-3.fc40

onnx provides an open source format for AI models, both deep learning and traditional ML. It defines an extensible computation graph model, as well as definitions of built-in operators and standard data types...

Improper Access Control

directus is vulnerable to Improper Access Control. The vulnerability is due to improper handling of in and nin operators, which allows an attacker to query expressions with empty arrays, which are evaluated as valid, resulting in unauthorized access...

GHSA-HXGM-GHMV-XJJM Directus incorrectly handles `_in` filter

Summary Directus =9.23.0, .role matches any of ". Which should fail. This instead passes in Directus =v9.23.0 PoC "role": "in": $CURRENTUSER.somefield field validation would pass if $CURRENTUSER.somefield is null. Real scenario: Using https://github.com/u12206050/directus-extension-role-chooser...

Directus incorrectly handles `_in` filter

Summary Directus =9.23.0, .role matches any of ". Which should fail. This instead passes in Directus =v9.23.0 PoC "role": "in": $CURRENTUSER.somefield field validation would pass if $CURRENTUSER.somefield is null. Real scenario: Using https://github.com/u12206050/directus-extension-role-chooser...

Directus Security Vulnerabilities

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in Directus versions 9.23.0 through 10.5.3 that stems from incorrect handling of the in, nin operators...

The vulnerability of the software for managing modules and services within Kubernetes Submariner Operators, related to errors in privilege management, allows a perpetrator to execute any container on a node.

The vulnerability of the software for installing, configuring, and managing Submariner in the Kubernetes Submariner Operator is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to execute arbitrary containers on nodes remotely...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: minio, wave, zot, amass, helm-operator-fips, bank-vaults-fips, wavefront-collector-for-kubernetes, boring-registry, nats-server, whereabouts-fips, harbor, terraform, cni-plugins-fips, helm-push, kustomize, ollama, authservice, kube-oidc-proxy, local-path-provisioner,...