GHSA-HJ3W-WRH4-44VP LLama Factory Remote OS Command Injection Vulnerability

Summary A critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure...

LLama Factory Remote OS Command Injection Vulnerability

Summary A critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure...

The vulnerability of the setParentalRules() function in TOTOLINK X5000R and A7000R router microprogramming software allows a violator to trigger a service failure.

The vulnerability of the setParentalRules function in TOTOLINK X5000R and A7000R router microprogramming systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a specially crafted PO...

The vulnerability of the mchp-pci1xxx component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mchp-pci1xxx component in the Linux operating system is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the io_uring/kbuf components in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the iouring/kbuf components in Linux operating systems is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/GMA500 components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/GMA500 components in Linux operating systems is related to incorrect blocking in the gmacrtcpageflip function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC15 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName in the Tenda AC15 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability could allow a...

The vulnerability of Palo Alto Networks’ operating system PAN-OS, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of Palo Alto Networks’ operating system PAN-OS relates to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the iwlwifi component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iwlwifi component in the Linux operating system is related to the lack of memory release after the effective service life in the function iwlrfigetfreqtable. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of CODESYS V3 microprogramming software for WAGO controllers allows a hacker to gain full access to the controller or cause a service failure.

The vulnerability of CODESYS V3 microprogramming software for WAGO controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full access to the controller or cause service failures...

The vulnerability of the Linux operating system’s kernel components, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel components is related to double-freeing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

A vulnerability in the riscv component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure.

The vulnerability in the riscv component of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the usbISP_detail_edit.cgi script of Netgear R7000P router software allows a hacker to induce a service failure.

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...

Vulnerability of components of Linux operating system’s kernel-based net/rds, allowing a hacker to cause a service failure

The vulnerability of the net/rds components of the Linux operating system’s kernel is related to the assignment of the NULL pointer in the rdsrdmamap function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mount.vmhgfs component in the VMware Open-vm-tools module set is related to incorrect definition of symbolic links before accessing the file. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mount.vmhgfs component in the VMware Open-vm-tools module set is related to incorrect definition of symbolic references before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability in the genie_pptp.cgi script of the Netgear R7000P router’s software allows a hacker to induce a service failure.

The vulnerability in the geniepptp.cgi script of the Netgear R7000P router operating system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows an attacker to cause a service...

The vulnerability of the io_uring components in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iouring component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

PT-2024-35489 · Unknown · Bitcoin Core

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 25.0 Description: The issue allows a peer to affect the download state of other peers by sending a mutated block. This can potentially disrupt the normal functioning of the Bitcoin network. Recommendations: For...

The vulnerability of the pskernel.DLL library, which is used in software for simulation, design, and drawing in AutoCAD, allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the pskernel.DLL library, which is used for simulation, design, and drafting in AutoCAD, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information,...