PT-2024-4116

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0 Description The vulnerability is related to the netfilter component of the Linux kernel, specifically the br netfilter module. It occurs when the bridge device is in promiscuous mode and packets directed to...

Adobe Bridge 13.x < 13.0.7 / 14.x < 14.0.3 Vulnerability (APSB24-24)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.7 or 14.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb24-24 advisory. - Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to...

APSB24-24 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses an important vulnerability that could lead to memory leak...

Adobe Bridge 13.x < 13.0.7 / 14.x < 14.0.3 Vulnerability (APSB24-24)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.7 or 14.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb24-24 advisory. - Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that cou...

Unbreakable Enterprise kernel security update

4.14.35-2047.535.2.1 - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36467681 CVE-2024-1086 4.14.35-2047.535.2 - Fix null ptr in rdstcprecvpath Allison Henderson Orabug: 33499812 - LTS version: v4.14.338 Saeed Mirzamohammadi - crypto: scompress - initialize...

CVE-2024-31260

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

CVE-2024-31260

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

CVE-2024-31260 WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

CVE-2024-31260

CVE-2024-31260 is an SQL Injection vulnerability in WisdmLabs Edwiser Bridge for WordPress, affecting Edwiser Bridge versions up to 3.0.2 (inclusive). The issue arises from improper neutralization of special elements used in SQL commands. Reports indicate the vulnerability is patched (Edwiser Bri...

CVE-2024-31260 WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

PT-2024-23904 · Edwiser · Edwiser Bridge

Name of the Vulnerable Software and Affected Versions: Edwiser Bridge versions 3.0.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

CVE-2024-31260: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

WordPress Plugin Edwiser Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Muhammad Daffa Patchstack Alliance in WordPress Plugin Edwiser Bridge versions = 3.0.2...

WordPress Edwiser Bridge Plugin <= 3.0.2 is vulnerable to SQL Injection

Software Edwiser Bridge Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.0.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31260 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 511519e30ba2 Credits Muhammad Daffa Required privilege Administrator...

CVE-2024-26761

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address HPA the HDM decoder registers are programmed wi...

Unable to change ciphers or SSL parameters on SSL Bridge virtual server.

No option is available to change ciphers or SSL parameters on SSLBRIDGE type virtual server...

Firewall Bypass

github.com/chirpstack/chirpstack-gateway-bridge/ is vulnerable to Firewall Bypass. The vulnerability is due to the firewall accepting specific TCP packets outside the ESTABLISHED connection state...

CVE-2021-47160

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCRMATRIX field was set to all 1's when VLAN filtering is enabled, but was not reset when it is disabled, which may cause traffic leaks: ip link add br0 type bridge vlanfiltering 1 ip link...

PT-2024-27020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The current implementation of the fpga bridge in the Linux kernel assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module...