7230 matches found
PostgreSQL 安全漏洞
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL that stems from...
PostgreSQL -- PostgreSQL row security below e.g. subqueries disregards user ID changes
PostgreSQL project reports: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery...
CVE-2024-52549
creationtimestamp| type| source ---|---|--- 2024-11-13 20:55:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113477637439411514 2024-11-13 22:20:22+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113477970956610756 2024-11-13 23:05:33+00:00| seen|...
Context is King: Using API Sessions for Security Context
There’s no doubt that API security is a hot topic these days. The continued growth in API-related breaches and increase in publicized API vulnerabilities has pushed API security to the top of CISO’s lists. The tools in the market for API security still have room for improvement, of course. One of...
CVE-2024-49019
creationtimestamp| type| source ---|---|--- 2024-11-12 17:59:10+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113471281510766374 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:56:07+00:00| seen|...
CVE-2024-8535
creationtimestamp| type| source ---|---|--- 2024-11-12 16:21:28+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113470897346004162 2024-11-12 21:24:48+00:00| seen| https://t.me/cvedetector/10695 2024-12-11 18:02:21+00:00| seen| https://t.me/itsecnews/4953 2024-12-16...
kernel: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
A compatibility issue was found between Linux and Hyper-V when Indirect Branch Tracking IBT is enabled. The Hyper-V hypercall page lacks the required ENDBR64 instruction, causing all hypercalls to fail with an exception and panic the guest...
DEBIAN-CVE-2024-50263
In the Linux kernel, the following vulnerability has been resolved: fork: only invoke khugepaged, ksm hooks if no error There is no reason to invoke these hooks early against an mm that is in an incomplete state. The change in commit d24062914837 "fork: use mtdup to duplicate maple tree in dupmma...
CVE-2024-50263
creationtimestamp| type| source ---|---|--- 2024-11-11 14:02:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113464690446915585 2024-11-11 16:06:12+00:00| seen| https://t.me/cvedetector/10497...
CVE-2024-43430
creationtimestamp| type| source ---|---|--- 2024-11-11 12:29:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113464324851825948 2024-11-11 12:33:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113464337042501312 2024-11-11 15:15:56+00:00| seen| https://t.me/cvedetector/104...
CVE-2024-11068
creationtimestamp| type| source ---|---|--- 2024-11-11 08:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113463310436998006 2024-11-11 10:15:01+00:00| seen| https://t.me/cvedetector/10481 2024-11-11 16:31:47+00:00| seen|...
CVE-2024-52351
creationtimestamp| type| source ---|---|--- 2024-11-11 06:48:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113462982732953651 2024-11-11 09:24:44+00:00| seen| https://t.me/cvedetector/10475...
CVE-2024-51574
creationtimestamp| type| source ---|---|--- 2024-11-11 05:52:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113462761916404250 2024-11-11 07:44:03+00:00| seen| https://t.me/cvedetector/10455...
CVE-2024-51584
creationtimestamp| type| source ---|---|--- 2024-11-10 09:09:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113457873408172947 2024-11-10 09:12:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113457886248225617 2024-11-10 10:49:52+00:00| seen| https://t.me/cvedetector/104...
CVE-2024-11051
creationtimestamp| type| source ---|---|--- 2024-11-10 07:38:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113457514706896302 2024-11-10 09:59:41+00:00| seen| https://t.me/cvedetector/10417...
CVE-2024-50244
creationtimestamp| type| source ---|---|--- 2024-11-09 12:19:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113452959542456354 2024-11-09 13:17:47+00:00| seen| https://t.me/cvedetector/10324...
Hello again, FakeBat: popular loader returns after months-long hiatus
The web browser, and search engines in particular, continue to be a popular entry point to deliver malware to users. While we noted a decrease in loaders distributed via malvertising for the past 3 months, today's example is a reminder that threat actors can quickly switch back to tried and teste...
CVE-2024-46948
creationtimestamp| type| source ---|---|--- 2024-11-08 15:50:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113448127656485474 2024-11-08 15:53:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113448139555020818 2024-11-08 18:02:41+00:00| seen| https://t.me/cvedetector/102...