SUSE CVE-2024-49853

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix double free in OPTEE transport Channels can be shared between protocols, avoid freeing the same channel descriptors twice when unloading the stack...

Hyperledger: The “payload” Field of Transactions in a Block Reveals the Private Data to All Peers

To whom it may concern, We are a research group conducting research on Hyperledger Fabric 2.0. We find a design flaw about the “payload” field of transactions, which can reveal the Private Data to all peers in one channel. When a client invokes a function to read the private data, the is stored i...

Vimeo: Share your channel to any user on vimeo without following him

Hi Team, Hope you are good. Privilege escalation vulnerability exist on the request of sharing your channel to user. You can share your channel to any user without even following him Request : POST /channels/893054 HTTP/1.0 Host: vimeo.com User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9;...