CVE-2024-13804

CVE-2024-13804 is an unauthenticated remote code execution vulnerability affecting Hewlett Packard Enterprise Insight Cluster Management Utility (CMU). Public references indicate impact on CMU version 8.2 and describe exploitation with network access and no authentication to run code with high pr...

CVE-2024-13804

Unauthenticated RCE in HPE Insight Cluster Management Utility...

CVE-2024-13804

Unauthenticated RCE in HPE Insight Cluster Management Utility...

Hewlett Packard Enterprise Insight Cluster Management Utility 安全漏洞

Hewlett Packard Enterprise Insight Cluster Management Utility is a utility for Hewlett Packard Enterprise cluster management from Hewlett Packard Enterprise USA. It can be used for monitoring, configuration and management of cluster systems. A security vulnerability exists in Hewlett Packard...

PT-2025-13633 · Hewlett Packard · Hpe Insight Cluster Management Utility

Name of the Vulnerable Software and Affected Versions: HPE Insight Cluster Management Utility CMU version 8.2 Description: The issue is related to an unauthenticated Remote Code Execution RCE vulnerability in HPE Insight Cluster Management Utility CMU. This vulnerability allows unauthenticated...

The vulnerabilities in the net/mac80211/cfg.c and net/wireless/util.c modules of the Linux operating system allow a hacker to cause a service failure.

The vulnerability in the net/mac80211/cfg.c and net/wireless/util.c modules of the Linux operating system is related to the expiration of a resource’s lifespan. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-21877

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelinkbind Syzbot reports 1 a warning in usbsubmiturb triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelinkbind does not properly...

CVE-2025-21877

CVE-2025-21877 (Linux kernel, usbnet gl620a) affects the usbnet implementation in the kernel where GenelInK_bind() fails to verify that the device actually provides the endpoints it requests. This can lead to a mismatch when an artificially manufactured endpoint is encountered, as Syzbot observed...

CVE-2025-21877 usbnet: gl620a: fix endpoint checking in genelink_bind()

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelinkbind Syzbot reports 1 a warning in usbsubmiturb triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelinkbind does not properly...

CVE-2025-21877

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelinkbind Syzbot reports 1 a warning in usbsubmiturb triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelinkbind does not properly...

CVE-2025-0454

A Server-Side Request Forgery SSRF vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the urlparse function from the urllib.parse library and the requests library. A malicious...

OESA-2025-1312 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

OESA-2025-1311 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

OESA-2025-1310 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility

Two now-patched security flaws impacting Cisco Smart Licensing Utility are seeing active exploitation attempts, according to SANS Internet Storm Center. The two critical-rated vulnerabilities in question are listed below - CVE-2024-20439 CVSS score: 9.8 - The presence of an undocumented static us...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_43_1, kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, and kpatch-patch-4_18_0-477_89_1 security update

An update for kpatch-patch-4180-477431, kpatch-patch-4180-477671, kpatch-patch-4180-477811, and kpatch-patch-4180-477891 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2025-0454

A Server-Side Request Forgery SSRF vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the urlparse function from the urllib.parse library and the requests library. A malicious...

CVE-2025-0454 SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt

A Server-Side Request Forgery SSRF vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the urlparse function from the urllib.parse library and the requests library. A malicious...

CVE-2025-0454 SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt

A Server-Side Request Forgery SSRF vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the urlparse function from the urllib.parse library and the requests library. A malicious...

CVE-2025-0454

The CVE-2025-0454 entry corresponds to a Server-Side Request Forgery (SSRF) in significant-gravitas/autogpt prior to v0.4.0. The root cause is a hostname confusion between urllib.parse.urlparse and the requests library, allowing a crafted URL (for example, http://localhost:@google.com/../) to byp...