PT-2022-30224

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to the use of /dev/urandom in gcc-plugins: latent entropy. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.9 and fixe...

PT-2022-29452

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns a fix for the clk hw get clk function when the dev parameter is NULL. This change was introduced in version v5.11 and fixed in version v5.17.2. The actual impact and attack...

PT-2022-30698

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

Slackware: Security Advisory (SSA:2009-111-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-8438

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18-rc2 Description A use-after-free issue in the Linux kernel's NFC subsystem allows for potential exploitation. The nfc dev up function does not properly check if the rfkill object is unregistered before use,...

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group...

dev-lyss.gemeinde.ch Cross Site Scripting vulnerability OBB-2467521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DEBIAN-CVE-2022-1222

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-1222

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...

Design/Logic Flaw

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-1222

Removed by vendor...

CVE-2022-1172

Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...

DEBIAN-CVE-2022-1172

Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-0343

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user typically a developer manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2...

Design/Logic Flaw

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user typically a developer manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2...

CVE-2022-0343 Local Priviledge escalation in Perfetto Dev scripts

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user typically a developer manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2...

CVE-2022-0343

CVE-2022-0343 affects Perfetto Dev scripts. A local attacker who can run the dev server (./tools/run-dev-server) may trigger HTTP requests to 127.0.0.1:10000, enabling a local privilege/escalation scenario. The issue is tied to the dev-server workflow rather than a remote vector. Remediation: upg...

CVE-2022-0343 Local Priviledge escalation in Perfetto Dev scripts

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user typically a developer manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2...

CVE-2022-0343

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user typically a developer manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2...

Google Perfetto security vulnerability

Google perfetto is a Google Inc. program for collecting performance information on Android devices via the Android Debug Bridge ADB. Google perfetto suffers from a security vulnerability that originates when a user usually a developer manually invokes the . /tools/run-dev-server script can send...