kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

A vulnerability was found in the Linux kernel's HNS3 network driver related to a use-after-free condition in the hclgevfsendmbxmsg function. The issue occurs when the hns3remove function uninstalls a client instance before uninstalling the acceleration engine device, leading to access of freed...

Error: "Cannot upgrade Citrix StoreFront with Receiver for HTML5" when upgrading to StoreFront 2.x

The following error is generated whenupgrading to StoreFront 2.x: "Error Cannot upgrade Storefront for Receiver for HTML5 Use the Citrix HTML5 HDX Engine Configuration tool to remove Receiver from HTML5 from all currently configured Receiver for Web sites. Then, uninstall Receiver for HTML5 and t...

Uninstalling or Upgrading from Beta Release of Hotfix Rollup Pack for XenApp not Supported

Uninstalling or Upgrading from Beta Release of Hotfix Rollup Pack for XenApp not Supported...

How to Fix the Uninstall of StoreFront

This article describes how to fix the uninstall of Citrix StoreFront when installed using a non-English UI. When StoreFront is installed under these conditions, uninstall will fail with error code 1605, erroneously indicating the product is not installed...

Best Practices to Uninstall XenApp/Presentation Server on Windows Server

This article contains best practices for uninstalling XenApp/Presentation Server 4.5 on Windows Server. Best Practices Before uninstalling any Citrix Server products, consider the following points: Ensure that all Hotfixes and Hotfix Rollup Packs are removed before uninstalling. Refer to the Hotf...

MAL-2024-7298 Malicious code in @zitterorg/nobis-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef4e0ae0c6d37770a2df5c89ea35daccb5a3f37e286c2f1cf0d208b08786862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7199 Malicious code in @zitterorg/esse-quae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50eec2d006ffc359b61460612d12be2fbff2a578b6ac6c1a087bb573a48cd1b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6297 Several WordPress.org Plugins <= Various Versions - Injected Backdoor

Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator...

MAL-2024-1663 Malicious code in @elza/auto-route-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0394416e392791c5f23be36b82f8800fa29bfd1381f8be67c7362338279c0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2021-47596

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...

DEBIAN-CVE-2021-47596

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...

UBUNTU-CVE-2021-47596

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...

CVE-2021-47596 net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...

MAL-2024-1571 Malicious code in asf-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0170c1a6080f641f60e56118c5047b047d529133a2aa949043ed62e0bac90488 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How to tell if a VPN app added your Windows device to a botnet

On May 29, 2024, the US Department of Justice DOJ announced it had dismantled what was likely the world’s largest botnet ever. This botnet, called “911 S5,” infected systems at over 19 million IP addresses across more than 190 countries. The main sources of income for the operators, who stole a...

CVE-2024-3269

The Download Monitor plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on the dlmuninstallplugin function in all versions up to, and including, 4.9.13. This makes it possible for authenticated attackers to uninstall the plugin and delete...

WordPress plugin Download Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-29038

Name of the Vulnerable Software and Affected Versions parisneo/lollms version latest Description The issue is related to arbitrary code execution due to insufficient sanitization of user input. Specifically, the /unInstall binding endpoint is vulnerable, and the problem arises from the lack of pa...

MAL-2024-1339 Malicious code in test-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d622822e0356b992f815ba0a803ee7598a5ff51894216a53a95ac034ca1185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1337 Malicious code in @sxmp/logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ae4f22558826d41c2db8d6705d87e6c33f6da3737504e0107814a9853924bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...