7007 matches found
CVE-2023-50889
creationtimestamp| type| source ---|---|--- 2023-12-29 13:27:10+00:00| seen| https://t.me/ctinow/160504 2023-12-30 01:39:27+00:00| seen| https://t.me/cibsecurity/73959 2024-01-21 11:41:39+00:00| seen| https://t.me/ctinow/170812...
OESA-2023-1990 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead...
SUSE CVE-2023-6546
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsmdlci while restarting th...
CVE-2023-43665
creationtimestamp| type| source ---|---|--- 2023-12-22 00:26:48+00:00| seen| https://t.me/ctinow/158089 2024-03-16 21:03:26+00:00| seen| https://t.me/arpsyndicate/4254...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a GSM multiplexing contention condition leading to privilege escalation, which occurs when two threads execu...
PT-2023-7984 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.129 Description: A heap buffer overflow in WebRTC allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is actively exploited and may cause crashe...
tonyobriencommunications.com Improper Access Control vulnerability OBB-3813944
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Softing OPC UA C++ SDK Security Vulnerability
The Softing OPC UA C++ SDK is a development kit from Softing Germany. It is used to quickly and easily integrate OPC UA clients and servers. A security vulnerability exists in versions of Softing OPC UA C++ SDK prior to V1.30, which stems from an uncaught exception issue that may cause the...
markgrafcommunications.com Improper Access Control vulnerability OBB-3804712
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-48696 Azure RTOS USBX Remote Code Execution Vulnerability
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include components in host class,...
IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2023-9817594)
IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. IBM Planning Analytics suffers from an information disclosure vulnerabilit...
IBM Planning Analytics 加密问题漏洞
IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. IBM Planning Analytics suffers from an information disclosure vulnerabilit...
[SECURITY] Fedora 39 Update: gnutls-3.8.2-1.fc39
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
MAL-2023-8548 Malicious code in logpeck (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4211ee8e232512f2d7fd8b78017d04589e493ba03994dd3a4cebc62898d2820 The OpenSSF Package Analysis project identified 'logpeck' @ 4.4.0 npm as malicious. It is considered malicious because: - The package communicat...
platinummediaandcommunications.com.au Improper Access Control vulnerability OBB-3782764
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Missing SSL certificate validation in localstack
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48055
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the disclosure of information and communications...
CVE-2023-48056
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining CBC mode in AES encryption. This vulnerability can lead to the disclosure of information and communications...
Design/Logic Flaw
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining CBC mode in AES encryption. This vulnerability can lead to the disclosure of information and communications...