kernel: ext4: avoid online resizing failures due to oversized flex bg

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesystem with a oversized flexbgsize, mkfs.ext4 -F -G 67108864 $dev -b 4096 100M mount $dev $dir resize2fs $dev 16G the following WARNO...

Huawei HarmonyOS Type Check Not Strict Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a type-checking laxity vulnerability, which stems from a type-checking laxity in the background task service module. An attacke...

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51521

Summary (CVE-2024-51521): This entry concerns an input-parameter verification vulnerability in Huawei HarmonyOS’ background service module. The impact is availability disruption on successful exploitation, with several sources noting a laxity/type-checking issue in the background task/service com...

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2024-34685 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an input parameter verification vulnerability in the background service module. Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a type-checking laxity vulnerability, which stems from a type-checking laxity in the background task service module. An attacke...

CVE-2024-48700

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...

SUSE CVE-2024-49880

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off by one issue in allocflexgd Wesley reported an issue: ================================================================== EXT4-fs dm-5: resizing filesystem from 7168 to 786432 blocks ------------ cut here -----------...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Set Background option in the Manage Custom Maps section, by uploading a malicious SV...

Race Condition

Overview terra-notebook-utils is an Utilities for the Terra notebook environment. Affected versions of this package are vulnerable to Race Condition in task submission due to improper thread synchronization. The issue could lead to crashes or inconsistent task states when tasks are submitted from...

Cross-site Scripting (XSS)

Concrete CMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper validation in the Image Editor's background color feature, allowing a rogue admin to inject malicious code into the Thumbnails/Add-Type function...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the Thumbnails/Add-Type interface in "Image Editor Background Color". An attacker with administrator privileges could add malicious code to the interface by adding a specially crafted background color value...

CVE-2024-8291

Concrete CMS stores stored XSS in the Image Editor background color feature (Thumbnails/Add-Type). Affected versions are 9.0.0–9.3.3 and below 8.5.19. The root cause is input that can inject malicious code via the Background Color field, exploitable by a rogue admin (privileges HIGH, UI not requi...

PT-2024-38919 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9.0.0 through 9.3.3 Concrete CMS versions below 8.5.19 Description: The issue concerns Stored XSS in the Image Editor Background Color, where a rogue admin could add malicious code to the Thumbnails/Add-Type. This could...

100 million+ US citizens have records leaked by background check service

A background check left a huge database unprotected online containing 2.2TB of people's data, according to research by Cybernews. The database was left passwordless and easily accessible to anyone on the internet by background check firm MC2 Data. MC2 Data gathers publicly available data to provi...

Security Problem in Web Browser Permission Mechanism

Overview A research team of Waseda University and NTT Social Informatics Laboratories conducted a systematic analysis of the permission mechanisms of 5 different Operating Systems both mobile and desktop OS and 22 major browsers running on each OS. The results show that they have multiple problem...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the bindAndGetCallIdentification method in the CallScreeningServiceHelper.java file contains a privilege bypass with a possible wa...