[SECURITY] Fedora 38 Update: perl-Spreadsheet-ParseXLSX-0.31-1.fc38

This module is an adaptor for that reads XLSX files. For documentation about the various data that you can retrieve from these classes, please see , , , and...

GHSA-29C2-65RJ-H343 Nervos CKB Permit load cell data from memory

Impact The faulty nodes will reject transactions which calls loadcelldata syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation. Patches 0.35.2, 0.36.1, 0.37.1, 0.38.2...

Nervos CKB Permit load cell data from memory

Impact The faulty nodes will reject transactions which calls loadcelldata syscall but the input cell is still in the mempool. They also ban other nodes and cause the network separation. Patches 0.35.2, 0.36.1, 0.37.1, 0.38.2...

PT-2024-40018 · Ckb · Ckb

Name of the Vulnerable Software and Affected Versions: Ckb versions prior to 0.35.2 Ckb versions prior to 0.36.1 Ckb versions prior to 0.37.1 Ckb versions prior to 0.38.2 Description: The issue causes faulty nodes to reject transactions that call the load cell data syscall when the input cell is...

OPENSUSE-SU-2024:0021-1 Security update for perl-Spreadsheet-ParseXLSX

This update for perl-Spreadsheet-ParseXLSX fixes the following issues: Updated to 0.29: see /usr/share/doc/packages/perl-Spreadsheet-ParseXLSX/Changes 0.29: - Fix for 'Argument '' isn't numeric in addition + at /usr/local/shar… - Incorrect cell values due to phonetic data doy72 - Fix die message ...

Velociraptor 0.7.1 Release

Written by Dr. Michael Cohen Sigma Support, ETW Multiplexing, Local Encrypted Storage and New VQL Capabilities Highlight the Last Release of 2023 Rapid7 is excited to announce that version 0.7.1 of Velociraptor is live and available for download. There are several new features and capabilities th...

(0Day) Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Cell. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

GHSA-RJHF-4MH8-9XJQ Zerocopy: Some Ref methods are unsound with some type parameters

The Ref methods intoref, intomut, intoslice, and intoslicemut are unsound and may allow safe code to exhibit undefined behavior when used with Ref where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut. See...

Some Ref methods are unsound with some type parameters

The Ref methods intoref, intomut, intoslice, and intoslicemut are unsound and may allow safe code to exhibit undefined behavior when used with Ref where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut. See...

PT-2023-30672 · Liblisp · Liblisp

Name of the Vulnerable Software and Affected Versions: Liblisp versions through commit 4c65969 Description: The issue is related to an out-of-bounds-read vulnerability in the get length function, which is located in the eval.c file and operates on lisp cell t objects. This vulnerability can be...

PT-2023-8033 · Hancom · Hancom Office Cell

Name of the Vulnerable Software and Affected Versions: Hancom Office Cell affected versions not specified Description: This issue is a stack-based buffer overflow in the XLS file parsing functionality of Hancom Office Cell. It allows remote attackers to execute arbitrary code on affected...

10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows

Cisco Talos recently disclosed 11 vulnerabilities, 10 of which are zero-days without a patch in an industrial cellular router. Attackers could exploit these vulnerabilities in the Yifan YF325 to carry out a variety of attacks, in some cases gaining the ability to execute arbitrary shell commands ...

aicscytoparam (>=0.1.1 <=0.1.2), aicsimageio (>=3.3.6 <=3.3.7) +45 more potentially affected by CVE-2023-4863 +1 more via imagecodecs (>=2019.12.31 <=2023.7.10)

imagecodecs PYPI version =2019.12.31, =0.1.1, =3.3.6, =1.10.0, =0.1.13, =1.2.9, =1.1.0, =1.1.15, =1.2.0, =2.0.0, =0.1.1, =0.4.0, =0.1.1, =2021.11.20, =2022.9.26 and more Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:GHSA-94VC-P8W7-5P49...

CVE-2023-24843

Transient DOS in Modem while triggering a camping on an 5G cell...

CVE-2023-24843 Reachable Assertion in Modem

Transient DOS in Modem while triggering a camping on an 5G cell...

CVE-2023-24843 Reachable Assertion in Modem

Transient DOS in Modem while triggering a camping on an 5G cell...

CVE-2023-24843

CVE-2023-24843 affects Qualcomm embedded platform modem components. The issue is a transient Denial of Service (DoS) in the modem when triggering a camping on a 5G cell, with CVSSv3.1 metrics indicating network access, low attack complexity, no privileges, no user interaction, and an Availability...

PT-2023-5953 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when triggering a camping on a 5G cell. It is also associated with a software vulnerability in...

phd-cell-signaling.at Cross Site Scripting vulnerability OBB-3697495

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-46292

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to...