143 matches found
CVE-2024-26877 crypto: xilinx - call finalize with bh disabled
In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling cryptofinalizerequest, BH should be disabled to avoid triggering the following calltrace: ------------ cut here ------------ WARNING: CPU: 2 PID: 74 at...
CVE-2024-26877 crypto: xilinx - call finalize with bh disabled
In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling cryptofinalizerequest, BH should be disabled to avoid triggering the following calltrace: ------------ cut here ------------ WARNING: CPU: 2 PID: 74 at...
CVE-2024-26877
CVE-2024-26877 concerns the Linux kernel crypto path for Xilinx/ZynqMP AES (crypto: xilinx – call finalize with bh disabled). The provided advisories describe a root-cause as performing crypto_finalize_request with BH enabled, which can trigger a call trace in crypto_finalize_request and related ...
CVE-2023-52566
A use after free flaw was found in nilfsgccachesubmitreaddata in the Linux kernel. This may result in a crash...
bh-recipe.jp Cross Site Scripting vulnerability OBB-3393913
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bh-materiaux.com Cross Site Scripting vulnerability OBB-3123356
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bh-auto.fr Cross Site Scripting vulnerability OBB-2841931
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2022-1003578 crypto: cryptd - Protect per-CPU resource by disabling BH.
crypto: cryptd - Protect per-CPU resource by disabling BH. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...
GSD-2022-1002010 tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH.
tcp: Don't acquire inetlistenhashbucket::lock with disabled BH. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...
PT-2025-8237
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw joinbss event prehandle function. This occurs when two threads attempt to access the same lock,...
[Security Nation] Brian Honan on creating Ireland's first CERT
!\Security Nation\ Brian Honan on creating Ireland's first CERThttps://blog.rapid7.com/content/images/2021/07/securitynationlogo-1.jpg In this episode of Security Nation, we’re joined by Brian Honan of BH Consulting. Jen and Tod chat with Brian about his experience as a founder of Ireland's first...
inquiry.bhcarroll.edu Cross Site Scripting vulnerability OBB-1360305
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in Standard Pepsi BH***.ashx Page of RunShen Information Technology (Shanghai) Co.
R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. A SQL injection vulnerability exists in the Standard Pepsi BH.ashx page of R&S Information Technology Shanghai Co. An attacker can exploit the vulnerability to obtai...
Vote for Malwarebytes Labs: European Security Blogger Awards 2018
It's nearly time for Infosec Europe 2018, and that means it's also time to consider voting for your favourite security blogs, podcasts, video channels, and more for the upcoming European Security Blogger Awards. Thanks to your generous votes, we've been fortunate enough to pick up the award for...
bh-swiss.com XSS vulnerability
Vulnerable URL: http://www.bh-swiss.com/contactus.php/%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2635244 VIP website status:| No Check bh-swiss.com SSL...
Exploiting XXE In File Upload Functionality
Just wanted to post some details from my BH USA 2015 briefing "Exploiting XXE In File Upload Functionality". The youtube video is up: I also gave an updated version of the presentation in November for the Blackhat Webcast Series. It included more file types; PDF, JPG, and GIF. The link is here:...
bh-online.dk XSS vulnerability
Vulnerable URL: http://www.bh-online.dk/webeditor/showpicture.asp?picturename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability
No description provided by source. db 88 88 ,ad8888ba, d88b 88 88 d8' 8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 8888 88 88888 d88b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 Y88888P Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net...
Bh-News Has Been Hacked By Dinelson US
Bh-News Has Been Hacked By Dinelson US Hacked Users : Website : www.bh-news.com...
GeekLog 1.7.0 Shell Upload
db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 88""""""""88 88 88888 d8""""""""8b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 "Y88888P" Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net/ Version: 1.7....