CVE-2024-8361 DoS caused due to wrong hash length returned for SHA2/224 algorithm

In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service DoS. If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not...

10 Non-tech things you wish you had done after being breached

TL;DR Non-tech aspects to breach follow-up are often overlooked but essential NDAs, supply chain, and third party contracts and obligations should be reviewed Reviewing communication protocols and employee training increases resilience Looking after, and retaining your people improves recovery fo...

CVE-2022-45186

CVE-2022-45186 affects SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field from the database, indicating a data exposure vulnerability. CVSSv3.1 base score 8.1 (HIGH) with network attack vector, low privileges, no user interaction needed, and with confidentiality/integrity impacts...

PT-2025-3084 · Hasleo · Hasleo Backup Suite Free

Name of the Vulnerable Software and Affected Versions: Hasleo Backup Suite Free versions prior to 4.9.5 Description: The issue concerns insecure permissions through the file recovery function. This allows for potential unauthorized access or manipulation of files. Recommendations: For versions...

PT-2025-34420

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the GFS2 filesystem related to self-recovery mechanisms. When a node withdraws and is the only node with the filesystem mounted, the system...

CVE-2024-56540

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

DEBIAN-CVE-2024-56749

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlmrecovermembers refcount on error If dlmrecovermembers fails we don't drop the references of the previous created rootlist that holds and keep all rsbs alive during the recovery. It might be not an unlikely event becau...

CVE-2024-56749 dlm: fix dlm_recover_members refcount on error

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlmrecovermembers refcount on error If dlmrecovermembers fails we don't drop the references of the previous created rootlist that holds and keep all rsbs alive during the recovery. It might be not an unlikely event becau...

CVE-2024-56749 dlm: fix dlm_recover_members refcount on error

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlmrecovermembers refcount on error If dlmrecovermembers fails we don't drop the references of the previous created rootlist that holds and keep all rsbs alive during the recovery. It might be not an unlikely event becau...

CVE-2024-56749

Technical details for CVE-2024-56749 are not publicly provided in the supplied documents; no vendor names, affected products, or remediation specifics are present. Monitor for official advisories and patches.

CVE-2024-56749 dlm: fix dlm_recover_members refcount on error

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlmrecovermembers refcount on error If dlmrecovermembers fails we don't drop the references of the previous created rootlist that holds and keep all rsbs alive during the recovery. It might be not an unlikely event becau...

CVE-2024-56540

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

CVE-2024-56540

In CVE-2024-56540, the Linux kernel ivpu IPC path (drivers/accel/ivpu/ivpu_ipc.c) was refactored: ipc send/receive functions were adjusted to avoid triggering a recovery during probe/resume. ivpu_send_receive_internal() is now used by D0i3 entry, DCT init, and HW init, with updated functions retu...

CVE-2024-56540 accel/ivpu: Prevent recovery invocation during probe and resume

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

CVE-2024-56540 accel/ivpu: Prevent recovery invocation during probe and resume

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

The vulnerability of the cross-platform FTP server CrushFTP, related to the lack of a password recovery mechanism, allows attackers to gain access to the user account and gain full control over the application.

The vulnerability of the cross-platform FTP server CrushFTP is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows an attacker to remotely gain access to a user account and full control over the application by resetting the user’s password via email...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates when a Xen network front-end device is removed immediately after going through a hang or recovery cycle, whi...

Sharp SH-54C 操作系统命令注入漏洞

The Sharp SH-54C is a wireless LAN connectivity station from Sharp Japan. Operating system command injection vulnerability exists in Sharp SH-54C S6.60.00 and earlier versions.The vulnerability stems from an operating system command injection vulnerability in the configuration recovery function,...

SUSE CVE-2020-8912

A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to change AES-GCM to AES-CTR. Using this i...

NTP Timeroast

Windows authenticates NTP requests by calculating the message digest using the NT hash followed by the first 48 bytes of the NTP message all fields preceding the key ID. An attacker can abuse this to recover hashes that can be cracked offline for machine and trust accounts. The attacker must know...