CVE-2024-38820: Improper Handling of Case Sensitivity

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

VMware Spring Framework security vulnerabilities

VMware Spring Framework is a set of open source Java, JavaEE application frameworks from VMware. The framework helps developers build high-quality applications. A security vulnerability exists in VMware Spring Framework that stems from case-sensitive matching exceptions that could cause fields to...

WordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Sovratec Case Management versions = 1.0.0...

Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

CVE-2024-48918

creationtimestamp| type| source ---|---|--- 2024-10-16 23:55:18+00:00| seen| https://t.me/cvedetector/8127...

CVE-2024-47674

In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...

CVE-2024-9914

creationtimestamp| type| source ---|---|--- 2024-10-13 20:35:57+00:00| seen| https://t.me/cvedetector/7787 2026-07-12 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqfyftqfr423...

Malware in case-result-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CentOS 7 : kernel-alt (RHSA-2020:0174)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0174 advisory. - In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt and bind on an AFPACKET socket...

Rogue AI: What the Security Community is Missing

This is the fourth blog post in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights...

CVE-2023-3441

creationtimestamp| type| source ---|---|--- 2024-10-01 12:44:44+00:00| seen| https://t.me/cvedetector/6741...

SUSE CVE-2024-46829

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Drop rtmutex::waitlock before scheduling rtmutexhandledeadlock is called with rtmutex::waitlock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless...

CVE-2024-20350

creationtimestamp| type| source ---|---|--- 2024-09-25 20:13:23+00:00| seen| https://t.me/cvedetector/6350 2024-09-26 19:30:05+00:00| seen| https://t.me/truesecator/6254 2024-09-27 08:45:27+00:00| seen| https://t.me/icscert/923 2024-09-29 04:48:43+00:00| published-proof-of-concept|...

Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8986 Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Bootiful Podcast: Flowable cofounder and my friend Joram Barrez on workflow, case management, AI, Spring, and so much more

Hi, Spring fans! In this installment I catch up with my friend Joram Barrez, cofounder of Flowable, an amazing and opensource workflow engine, on their latest and greatest, AI, Spring, and so much more. workflow bpmn apache2 springboot java...

Identifying Rogue AI

This is the third blog in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights...

CVE-2024-46789 mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook

In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s-flags in the alloctaggingslabfreehook When enable CONFIGMEMCG & CONFIGKFENCE & CONFIGKMEMLEAK, the following warning always occurs,This is because the following call stack occurred: mempoolalloc...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that the per-CPU variable seg6bpfsrhstates::srh is never assigned in the self-check use case, but i...

CVE-2024-44430

SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortexlite/control/registercase.php interface...