CVE-2024-25393

The CVE-2024-25393 entry concerns RT-Thread up to version 5.0.2, where a stack buffer overflow exists in net/at/src/at_server.c due to insufficient validation of input length. This vulnerability can enable remote attackers to execute arbitrary code or cause a denial of service. The CVSS score is ...

CVE-2024-25393

A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...

DEBIAN-CVE-2021-47172

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers Channel numbering must start at 0 and then not have any holes, or it is possible to overflow the available storage. Note this bug was introduced as pa...

The ‘AT&T breach’—what you need to know

Earlier this week, the data of over 70 million people was posted for sale on an online cybercrime forum. The person selling the data claims it stems from a 2021 breach at AT&T. Back in 2021, a hacker named Shiny Hunters claimed to have breached AT&T and put the alleged stolen data up for sale for...

abstracts.boku.ac.at Cross Site Scripting vulnerability OBB-3878463

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2024-1116 Malicious code in custom-banner-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34d3a0ada39e2fd82258a3fc7c24701af1389dc5d9de771dd18d930e9ccc2ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

at-portal-new.my1.ru Cross Site Scripting vulnerability OBB-3875351

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2024-1073 Malicious code in dismissprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e57b2c157fbb4ae27dd1ea7ddb8c370c151171838b953706151a60c3399716b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-20918 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A stack buffer overflow occurs in the net/at/src/at server.c file. Recommendations: For RT-Thread versions through 5.0.2, update to a version that contains a fix for this issue...

CVE-2021-47007

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix panic during f2fsresizefs f2fsresizefs hangs in below callstack with testcase: - mkfs 16GB image & mount image - dd 8GB fileA - dd 8GB fileB - sync - rm fileA - sync - resize filesystem to 8GB kernel BUG at...

AZL-43501 CVE-2024-25629 affecting package python-pycares 3.1.1-3

c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded...

PT-2024-1920 · C-Ares +9 · C-Ares +9

Name of the Vulnerable Software and Affected Versions: c-ares versions prior to 1.27.0 Description: The issue is related to the ares read line function in the c-ares library, which is used for asynchronous DNS requests. This function parses local configuration files such as /etc/resolv.conf,...

AT&T Outage Disrupts Service for Millions of Users Across US

By Waqas You are not alone, an AT&T outage is happening across the United States, and the company is working… This is a post from HackRead.com Read the original post: AT&T Outage Disrupts Service for Millions of Users Across US...

Out-of-bounds Read

Overview node-stringbuilder is an An easy and fast in-memory string builder for Node.js. Affected versions of this package are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string...

jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE

A flaw was found in Jenkins, which uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces the "@" character followed by a file path in an argument with the file’s contents expandAtFiles...

MAL-2024-980 Malicious code in nhatcoder-fb-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514bcd1028981b3a51b43d0f59deab5d625f73a52db290bee59c40e598bf0c86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

quotalo.it Improper Access Control vulnerability OBB-3843974

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2024-853 Malicious code in wlwz-2312-7508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2976088d1f33a5e64ad952bfc59c15cf57033bf60c6f0c32a454db43aeb06407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-896 Malicious code in wlwz-2312-8006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13c76d862c6b9979ddd74fa38381d47c6ffa431dfc9c692a0e9a123be15c456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-870 Malicious code in wlwz-2312-7707 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4627eb83d8f5670a2c27f6b9a4b6fc46351f1955473f267ebe81684c1e777d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...