AZL-52492 CVE-2024-50116 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUGON check for the buffer delay flag in submitbhwbc may fai...

PT-2024-33930

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock that occurs when rebooting the system at the beginning of booting. This happens because the audio driver is waiting on blk mq submit bio while holdin...

PT-2024-16475 · Unknown · Code-Projects University Event Management System

Name of the Vulnerable Software and Affected Versions: code-projects University Event Management System version 1.0 Description: A critical issue has been found in the code-projects University Event Management System, affecting the file submit.php. The manipulation of the arguments name, email,...

PT-2024-39769 · WordPress · Forminator Forms

Name of the Vulnerable Software and Affected Versions: Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress versions up to, and including, 1.36.0 Description: The issue is related to Insecure Direct Object Reference, which allows unauthenticated attackers to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing lock in the drm/xe/gucsubmit subsystem in the wedgedfini function, which could lead to post-releas...

PT-2024-33831

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A potential lockup issue has been identified in the Linux kernel, specifically in the iommu/vt-d component, when the qi submit sync function is called with a count of 0. This issue has been...

CVE-2024-9436: Improper Neutralization of Input During Web Page Generation

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.5.14. This makes it possible...

The vulnerability of the usb_submit_urb() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the usbsubmiturb function in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow a attacker to trigger a service failure...

UBUNTU-CVE-2024-46760

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: schedule rx work after everything is set up Right now it's possible to hit NULL pointer dereference in rtwrxfillrxstatus on hw object and/or its fields because initialization routine can start getting USB replie...

HYSCALE System 1.9 Add Administrator / Cross Site Request Forgery

============================================================================================================================================= | Title : HYSCALE System v1.9 CSRF add admin Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64...

Online Notice Board System 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : Online Notice Board System project 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozil...

SUSE CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

DEBIAN-CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

UBUNTU-CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly manage memory when handling failures in the btrfssubmitchunk function, which could lea...

CVE-2024-8428

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submitformhandler due to missing validation on the 'userid' user controlled key. This makes it possible...

CVE-2024-41346

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/submit.php...

openflights 安全漏洞

OpenFlights is a tool by Jani Patokallio individual developer. It can map flights around the world. A security vulnerability exists in openflights version 5234b5b, which stems from the presence of a cross-site scripting XSS vulnerability via php/submit.php...

PT-2024-29364

Name of the Vulnerable Software and Affected Versions openflights version 5234b5b Description The issue is a Cross-Site Scripting XSS vulnerability. It occurs via the "php/submit.php" endpoint. Recommendations For version 5234b5b, as a temporary workaround, consider disabling access to the...

PT-2024-8011

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.48/6.10.7 Description A use-after-free vulnerability has been identified in the Linux kernel's btrfs file system, specifically in the btrfs submit chunk function. This vulnerability can be triggered when the...