PT-2024-25101 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue occurs when parsing the ML IE, resulting in a transient DOS, specifically when a beacon has a common info length of the ML IE greater than the ML IE inside which...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2024-35250-BOF The Beacon Object File BOF implementati...

CVE-2024-51828

CVE-2024-51828 is an XSS vulnerability affecting the WordPress plugin Beacon For Help Scout (WordPress plugin) with versions up to and including 1.3.0 . The issue is described as an Authenticated (Contributor+) Stored Cross-Site Scripting vector arising from improper neutralization of input durin...

CVE-2024-51828 WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...

WordPress plugin Beacon For Help Scout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

kernel: wifi: rt2x00: restart beacon queue when hardware reset

A flaw was found in the Linux kernel. When a hardware reset is triggered, all registers are reset, so all queues are forced to stop in the hardware interface. However, mac80211 will not automatically stop the queue. If the beacon queue is not manually stopped, it will be deadlocked and unable to...

WordPress Beacon For Help Scout Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Beacon For Help Scout Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51828 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 28de7e29c4c2 Credits SOPROBRO Required privilege...

CVE-2024-33068

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33068 Use After Free in WLAN Host Communication

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33068

CVE-2024-33068 is a vulnerability described as a transient DoS during parsing of MBSSID IE fragments in beacon frames. Public sources (NVD, Red Hat, CVE list) tie it to WLAN host communication and a use-after-free style issue in Qualcomm chipsets, with base scores: NVD 6.5 (MEDIUM) and CNA 7.5 (H...

CVE-2024-33068 Use After Free in WLAN Host Communication

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

Writing a BugSleep C2 server and detecting its traffic with Snort

In June 2024, security researchers published their analysis of a novel implant dubbed "MuddyRot"aka "BugSleep". This remote access tool RAT gives operators reverse shell and file input/output I/O capabilities on a victim's endpoint using a bespoke command and control C2 protocol. This blog will...

DEBIAN-CVE-2024-47724

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

CVE-2024-47724

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

UBUNTU-CVE-2024-47724

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

CVE-2024-47724

CVE-2024-47724 concerns the Linux kernel wifi driver ath11k beacon template handling. The issue arises when beacon TX status events trigger a sleep in an RCU read-side path, specifically via ath11k_wmi_cmd_send() called during BCN templating, which can sleep in atomic context. The root cause trac...

CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

CVE-2024-47724

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mishandling of beacon tx events in the wifi:ath11k subsystem, which could lead to a kernel crash...