ppp: do not assume bh is held in ppp_channel_bridge_input()

...

WordPress plugin Grid Plus 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that originates from the nav2amcl process containing post-release reuse. The vulnerability is triggered by remotely sending a request to change the value of dobeamskip in the dynamic...

PT-2024-16945 · WordPress · Broadcast

Name of the Vulnerable Software and Affected Versions: Broadcast plugin for WordPress versions up to, and including, 51.01 Description: The issue is related to Reflected Cross-Site Scripting via the do check parameter due to insufficient input sanitization and output escaping. This allows...

WordPress plugin Broadcast 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

kernel: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

A vulnerability was found in the dotaskstat function in the Linux kernel, where due to excessive lock contention, a potential hard lockup could be created. This can create a performance bottleneck and lead to kernel unresponsiveness...

AZL-54126 CVE-2024-53109 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...

CVE-2024-51900

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in James Hunt What Would Seth Godin Do what-would-seth-godin-do allows Stored XSS.This issue affects What Would Seth Godin Do: from n/a through = 2.1.1...

CVE-2024-51900

CVE-2024-51900 is a stored XSS in the WordPress plugin What Would Seth Godin Do (versions

WordPress plugin What Would Seth Godin Do 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site...

The vulnerability of the vmk80xx component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vmk80xx component of the Linux operating system’s kernel is related to a memory corruption in the vmk80xxdobulkmsg function. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-53097

In the Linux kernel, the following vulnerability has been resolved: mm: krealloc: Fix MTE false alarm in dokrealloc This patch addresses an issue introduced by commit 1a83a716ec233 "mm: krealloc: consider spare memory for GFPZERO" which causes MTE Memory Tagging Extension to falsely report a...

OESA-2024-2446 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in dozonefinish Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to a memory leak in the doreplacefinish function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-50293

Technical details about CVE-2024-50293 (net/smc dangling sk in __smc_create) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

WordPress plugin Do That Task 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2024-35211 · Unknown · Do That Task

Name of the Vulnerable Software and Affected Versions: Do That Task versions 1.5.5 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access to the...

kernel: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

A vulnerability was found in the dotaskstat function in the Linux kernel, where due to excessive lock contention, a potential hard lockup could be created. This can create a performance bottleneck and lead to kernel unresponsiveness...

WordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Do That Task versions = 1.5.5...

WordPress Do That Task Plugin <= 1.5.5 is vulnerable to Arbitrary File Upload

Software Do That Task Type Plugin Vulnerable versions = 1.5.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52374 Patch priority High CVSS severity High 10 Developer Claim ownership PSID c6bc71bfe0aa Credits stealthcopter Required privilege...