kernel: perf: Fix event leak upon exit

A logical flaw exists in the Linux kernel. When a task is scheduled, pending sigtrap deliveries are deferred to the target task upon resuming to userspace via taskwork. However, failures are ignored while adding an event's callback to the taskwork engine. Since the last call for the event exit...

kernel: perf: Fix event leak upon exec and file release

Linux kernel perf pending task work is never waited upon the matching event release; in the case of a child event, released via freeevent directly, this can potentially result in a leaked event...

kernel: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

A vulnerability was found in the dotaskstat function in the Linux kernel, where due to excessive lock contention, a potential hard lockup could be created. This can create a performance bottleneck and lead to kernel unresponsiveness...

kernel: rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()

A hung task warning issue was found in the RCU scaling test module. When the holdoff parameter exceeds hungtasktimeoutsecs, the kernel logs a hung task warning for the rcuscalewriter kthread...

kernel: io_uring/rsrc: don't lock while !TASK_RUNNING

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't lock while !TASKRUNNING There is a report of iorsrcrefquiesce locking a mutex while not TASKRUNNING, which is due to forgetting restoring the state back after ioruntaskworksig and attempts to break out of the...

kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible

A vulnerability was found in the Linux kernel's qedf driver function qedfexecutetmf, where the function call smpprocessorid is done from preemptible code before acquiring a lock which can result in BUGON when running an RT kernel. This can result in system inconsistencies...

Windows Task Scheduler Elevation of Privilege Vulnerability

...

CVE-2024-11096

A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11096

A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11096 code-projects Task Manager newProject.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11096

CVE-2024-11096 affects code-projects Task Manager 1.0. The vulnerability is an SQL injection in the /newProject.php page, triggered by manipulating the projectName parameter. Exploitation is possible remotely, and public exploit information exists. The CVSS data across sources indicates various i...

Task Manager 注入漏洞

Task Manager is an open source task manager application from Code-Projects. An injection vulnerability exists in Task Manager version 1.0, which stems from an SQL injection vulnerability in the projectName parameter of the /newProject.php page...

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Microsoft Windows Task Scheduler 授权问题漏洞

Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. An authorization issue vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to...

VulnCheck KEV: CVE-2024-49039

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

PT-2024-7873

Name of the Vulnerable Software and Affected Versions Windows Task Scheduler versions prior to the fixed version in November Patch Tuesday Description The vulnerability is an elevation-of-privilege issue in the Windows Task Scheduler, allowing attackers to elevate their privileges to Medium...

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

WordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Do That Task versions = 1.5.5...

WordPress Do That Task Plugin <= 1.5.5 is vulnerable to Arbitrary File Upload

Software Do That Task Type Plugin Vulnerable versions = 1.5.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52374 Patch priority High CVSS severity High 10 Developer Claim ownership PSID c6bc71bfe0aa Credits stealthcopter Required privilege...

SUSE CVE-2024-50223

In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in tasknumawork When running stress-ng-vm-segv test, we found a null pointer dereference error in tasknumawork. Here is the backtrace: 323676.066985 Unable to handle kernel...