895 matches found
PT-2024-20427 · Act-On · Act-On
Name of the Vulnerable Software and Affected Versions: Act-On version 2023 Description: The issue allows a remote attacker to execute arbitrary code via the newUser parameter in the "login.jsp" component. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Act-...
CVE-2024-24507
Act-On (v2023) is affected by a Cross Site Scripting vulnerability in the login.jsp component, exploitable via the newUser parameter. The issue enables a remote attacker to execute arbitrary code through XSS. The vulnerability is documented across multiple sources (Act-On context; login.jsp; newU...
CVE-2024-6729
A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...
DEBIAN-CVE-2024-40995
In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix possible infinite loop in tcfidrcheckalloc syzbot found hanging tasks waiting on rtnllock 1 A reproducer is available in the syzbot bug. When a request to add multiple actions with the same index is sent, t...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a potential infinite loop in the tcfidrcheckalloc function of the net/sched:actapi component...
Malicious code in sap-act (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 221d8d0fa70183e7db924b26c6bc4cf81969dc2b328c3b38ab1473605dc1caa7 The OpenSSF Package Analysis project identified 'sap-act' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2024-7486 Malicious code in sap-act (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 221d8d0fa70183e7db924b26c6bc4cf81969dc2b328c3b38ab1473605dc1caa7 The OpenSSF Package Analysis project identified 'sap-act' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...
kernel: net/sched: act_skbmod: Skip non-Ethernet packets
A vulnerability was found in the Linux kernel’s actskbmod module, where the tcfskbmodact function mistakenly assumes all packets use Ethernet as their protocol. This issue can lead to the corruption of non-Ethernet packets, such as those from CAN devices, if skbmod actions are incorrectly applied...
kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it ...
kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it ...
Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny
Meta's decision to offer an ad-free subscription in the European Union E.U. has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the...
Busted for book club? Why cops want to see what you’re reading, with Sarah Lamdan (Lock and Code S05E14)
This week on the Lock and Code podcast… More than 20 years ago, a law that the United States would eventually use to justify the warrantless collection of Americans phone call records actually started out as a warning sign against an entirely different target: Libraries. Not two months after...
Surprise! The Latest ‘Comprehensive’ US Privacy Bill Is Doomed
Gutted of civil rights protections by Democrats to woo pro-business Republicans, the American Privacy Rights Act was pulled from a key congressional hearing—and appears unlikely to receive a full vote...
MAL-2024-6504 Malicious code in acts-as_subscribable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6375 Malicious code in act-blue_reporter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_time_as_boolean (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-blue_reporter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6373 Malicious code in act-as_serializable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...