GSD-2022-1000851 sc16is7xx: Fix for incorrect data being transmitted

sc16is7xx: Fix for incorrect data being transmitted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

Don’t fall for the “Donate to help children in Ukraine” scam

Earlier this week, we spotted a Microsoft sign-in phish that appeared to be taking advantage of the Ukraine crisis in order to scam people. The email warned of unauthorized log in attempts to the recipients account, and the location of those attempts was listed as "Russia/Moscow". We probably won...

GSD-2022-1000297 ax25: improve the incomplete fix to avoid UAF and NPD bugs

ax25: improve the incomplete fix to avoid UAF and NPD bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.303 by commit...

CVE-2021-40340

Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server exposes server and ASP.net information, an attacker that manages to exploit this vulnerability can use the exposed information as a reconnaissance for further exploitation. This...

digitalmarketingaid.com Improper Access Control vulnerability OBB-2298485

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UVI-2021-1001746 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001704 drm/amdkfd: fix svm_migrate_fini warning

drm/amdkfd: fix svmmigratefini warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.11 by commit...

Apache OFBiz安全漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a suite of Java-based web application components and tools. A security vulnerability exists in Apache Ofbiz versions 17.12.01 through 17.12.07, which stems from the...

GSD-2021-1001309 net/sched: act_skbmod: Skip non-Ethernet packets

net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...

GSD-2021-1001154 bpf: Track subprog poke descriptors correctly and fix use-after-free

bpf: Track subprog poke descriptors correctly and fix use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.5 by commit...

GSD-2021-1001047 mm/memory-failure: make sure wait for page writeback in memory_failure

mm/memory-failure: make sure wait for page writeback in memoryfailure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1000732 pid: take a reference when initializing `cad_pid`

pid: take a reference when initializing cadpid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit...

CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

ECShop SQL注入漏洞

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 3.0. An attacker can exploit this vulnerability by using the aid parameter of admin/affiliateck.php to conduct SQL injection attacks...

GSD-2021-1000693 serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'

serial: rp2: use 'requestfirmware' instead of 'requestfirmwarenowait' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.271 by commit...

GSD-2021-1000289 bus: qcom: Put child node before return

bus: qcom: Put child node before return This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

Blurred Satellite Images Make Rebuilding Palestine Harder

Digital researchers and aid groups say free mapping tools like Google Earth are too imprecise...

New Hack Lets Attackers Bypass MasterCard PIN by Using Them As Visa Card

Cybersecurity researchers have disclosed a novel attack that could allow criminals to trick a point of sale terminal into transacting with a victim's Mastercard contactless card while believing it to be a Visa card. The research, published by a group of academics from ETH Zurich, builds on a stud...