DEBIAN-CVE-2024-39489

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6hmacinitalgo seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6hmacexit to only free the memory...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

CodiMD Security Vulnerabilities

CodiMD is a real-time collaborative note-taking application open-sourced by HackMD. A security vulnerability exists in CodiMD version 2.5.3, which stems from a vulnerability that allows rendering of HTML tags with improperly cleaned up tags, which enables an attacker to perform cross-site scripti...

WordPress plugin SCSS Happy Compiler security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Unlimited Elements For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-33742

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue arises from the Linux kernel's handling of GPU device initialization, specifically in the drm/msm/adreno component. In certain cases, such as when speedbin data is present in the...

kernel: mISDN: fix possible use-after-free in HFC_cleanup()

A vulnerability was found in the Linux kernel's mISDN driver. This issue arises during the cleanup process, where a timer handler might still be running after the driver has been removed, which can lead to a use-after-free issue, potentially causing a system crash...

Khoj Security Vulnerabilities

Khoj is an open source application from Khoj AI. It can create ready-to-use personal AI agents for users. A security vulnerability exists in versions prior to Khoj 1.13.0 that stems from insufficient response to AI models and user input cleanup, which could lead to a cross-site scripting XSS...

Devika Cross-Site Scripting Vulnerability

Stition Devika is an advanced AI software engineer at Stition USA that understands advanced human commands, breaks them down into steps, researches relevant information, and writes code to achieve a given goal. Devika suffers from a cross-site scripting vulnerability that stems from improper...

DEBIAN-CVE-2024-39484

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip remove function when driver is builtin Using exit for the remove function results in the remove callback being discarded with CONFIGMMCDAVINCI=y. When such a device gets unbound e.g. using sysfs or...

Malicious code in @zitterorg/deserunt-beatae-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9102b6b1b9c0603fe9968c593b5a7500377a6ac0843e6595dc438c9b75e213f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/velit-occaecati (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e63adb86ef0ff581b6a33d4906768568a8a1f235ae161f03ed5e01dd6f1f2194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/expedita-quasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422b14874a0462f719fa48a436f12e8606f4fce7f46142d02f14777d8c46f590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quibusdam-numquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d100cc641d497e5bdffba82d8bf5e672268f965acea2403dde38c4a69eab7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/accusantium-reprehenderit-quisquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be1f228b74f15b3e0f922c3fa0c4b0eec8135b73e43e2cfe6b7535406bb05cdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/dignissimos-doloremque-magnam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87ebb1893495b74b563f0f42621c15a051580f9d0ddf7132cafbb8adaf49ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/libero-laudantium-unde (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788c67c5ed955b93f0c7952f0de52cccf57fbe4a70ed297f5d5f23dda7c21289 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Elementor Addons by Livemesh security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Deep Lake Security Breach

Deep Lake is an AI database open-sourced by Activeloop. Its storage format is optimized for deep learning applications. A security vulnerability exists in Deep Lake version 3.9.10, which stems from a lack of input cleanup and command injection when extracting remote Kaggle datasets...

WordPress plugin The Plus Addons for Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...