PT-2022-30177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A bug in the Linux Kernel, introduced in version v5.11, causes a sleep-in-atomic issue due to the genpd debug remove function. The actual impact and attack plausibility of this issue have not...

PT-2022-29872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A bug in the Linux Kernel, introduced in version v5.11, causes a sleep-in-atomic issue due to the genpd debug remove function. The actual impact and attack plausibility of this issue have not...

PT-2022-29565

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A bug in the Linux Kernel, introduced in version v5.11, causes an issue with sleep-in-atomic due to the genpd debug remove function. The actual impact and attack plausibility have not yet been...

Update of kernel, kernel-headers, kernel-debug-devel, kernel-debug, perf, python-perf, kernel-debug-devel, kernel-devel

KB-127: Bump version separete fw build...

DumpSMBShare - A Script To Dump Files And Folders Remotely From A Windows SMB Share

A script to dump files and folders remotely from a Windows SMB share. Features Only list shares with --list-shares. Select only files with given extensions with --extensions or all files. Choose the local folder to dump to with --dump-dir. Select base folder to search from in the share with...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2022-1464)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a...

CVE-2020-25156

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root...

Code injection

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root...

CVE-2020-25156

CVE-2020-25156 concerns active debug code in B. Braun SpaceCom (versions L8/U61 and earlier) and Data module compactplus (A10/A11 and earlier) enabling possession of cryptographic material to gain root access. Connected sources confirm affected products and versions, with remediation updates rele...

CVE-2020-25156 B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root...

CVE-2020-25156: Active Debug Code

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root...

PT-2022-8701

Name of the Vulnerable Software and Affected Versions B. Braun Melsungen AG SpaceCom version L8/U61 Data module compactplus versions A10 and A11 and earlier Description The issue allows attackers with cryptographic material to access the device as root due to active debug code. Recommendations Fo...

PT-2025-8009

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7 Description A vulnerability in the Linux kernel has been identified, which can cause runtime warnings when CONFIG DEBUG KMAP LOCAL is enabled. The issue arises from the kmap local sched in,out function...

Backdoor.Win32.Xingdoor Denial Of Service

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/89000e259ffbd107b7cc9bac66dcdcf5.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Xingdoor Vulnerability: Denial of Service Description: The malware "SystemXingCheng"...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : oslo.utils vulnerability (USN-5369-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5369-1 advisory. It was discovered that oslo.utils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive...

CVE-2022-24797 Exposure of Sensitive Information in Pomerium

Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak potentially sensitive environmental information or lead to limited denial of service conditions. This...

PT-2022-16885 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions prior to v0.17.1 Description: Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak...

CVE-2022-0770

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access t...

CVE-2022-0770

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access t...

CVE-2022-0770

The Translate WordPress with GTranslate plugin for WordPress is affected by a CSRF vulnerability in versions before 2.9.9, due to missing CSRF checks in certain files. This flaw can cause the plugin to write debug data such as a user’s cookies to publicly accessible files when a specific paramete...