XWiki Platform 跨站脚本漏洞

XWiki Platform is a suite of Wiki platforms from the XWiki Foundation in France for creating collaborative Web applications. XWiki Platform suffers from a cross-site scripting vulnerability that originates from the fact that any user with editing privileges can edit all pages in the space,...

CLSA-2023-1687469630 Fix CVE(s): CVE-2023-24329

SECURITY UPDATE: urllib.parse space handling CVE-2023-24329 appears unfixed - debian/patches/CVE-2023-24329-2.patch: start stripping C0 control and space chars in urlsplit - CVE-2023-24329...

CLSA-2023-1687469528 Fix CVE(s): CVE-2023-24329

SECURITY UPDATE: urllib.parse space handling CVE-2023-24329 appears unfixed - debian/patches/CVE-2023-24329-2.patch: start stripping C0 control and space chars in urlsplit - CVE-2023-24329...

PT-2025-53065

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc6-btrfs-next-134+ Description The Linux kernel contained a flaw in the btrfs subsystem related to the handling of free space tree deletion. Specifically, the code lacked proper synchronization when removi...

CVE-2022-27924

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 23:25:04+00:00| seen| https://t.me/arpsyndicate/1056 2024-12-24 20:32:39+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971675 2025-02-23 02:10:36+00:00|...

CVE-2017-12237

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:35+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971322 2025-02-23 02:10:14+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2018-20753

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:30+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971516 2025-02-23 02:10:19+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2016-0162

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:20+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971575 2025-02-14 10:00:27+00:00| seen| Telegram/fDe2aaJtAy1Ik6CcR7Ow8xM0rFnIAG6VRaJJP5ZKhOF5P5--...

Adobe Animate 资源管理错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Animate. The vulnerability stems from a user interaction called "use-after-release," which could lead to the execution of arbitrary code in the context of the curre...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. Note: This issue is a result of missing checks for services that require an active session. Remediation Upgrade asyncua to...

World Mobile’s Africa Field Tests: Harnessing TV White Space and Starlink

By Owais Sultan World Mobile, a decentralized wireless network operator, has achieved a significant milestone with the successful completion of field… This is a post from HackRead.com Read the original post: World Mobiles Africa Field Tests: Harnessing TV White Space and Starlink...

Atlas Copco Power Focus 6000

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Atlas Copco Equipment: Power Focus 6000 Vulnerabilities: Cleartext Storage of Sensitive Information, Small Space of Random Values, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION...

fuse-overlayfs bug fix and enhancement update

An update is available for fuse-overlayfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fuse-overlayfs package provides an overlayfs FUSE implementation,...

space-marine.com Cross Site Scripting vulnerability OBB-3354180

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2023-2662

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

[SECURITY] Fedora 37 Update: keyring-ima-signer-0.1.0-9.fc37

The IMA Integrity Measurement Architecture is a key component of the Linux integrity subsystem designed to ensure integrity, authenticity, and confidentiality of systems including hardware root of trusts TPM. This tool allows signing of files in userspace, inclusding options of including the...

The vulnerability of the ext4_xattr_set_entry() function in the fs/ext4/xattr.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ext4xattrsetentry function in the fs/ext4/xattr.c module of the Linux kernel is related to incorrect calculation of the available storage space for storing attributes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

RUSTSEC-2023-0038 Out-of-bounds array access leads to panic

Affected versions of the crate have several bugs where attacker-controlled input can result in the use of an out-of-bound array index. Rust detects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it ...

kernel: Executable Space Protection Bypass

A vulnerability was found in the Linux kernel when certain binary files have the exec-all attribute with gcc. This issue can cause the execution of bytes located in the non-executable regions of a file...

kernel: Executable Space Protection Bypass

A vulnerability was found in the Linux kernel when certain binary files have the exec-all attribute with gcc. This issue can cause the execution of bytes located in the non-executable regions of a file...