PT-2021-30277

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.213 Description A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not ye...

PT-2021-30296

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.155 Description A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not yet...

PT-2021-26334

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.75 Description: A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not y...

PT-2021-26282

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.213 Description: A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not...

PT-2021-30263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.252 Description A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not ye...

PT-2021-30329

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not yet...

PT-2021-26268

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.252 Description: A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not...

PT-2021-26256

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.288 Description: A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not y...

PT-2021-26301

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.155 Description: A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not y...

PT-2021-8155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the Linux kernel's lpfc component. This occurs when an FC link down transition happens while PLOGIs are outstanding to fabric...

reward tokens could get lost due to rounding down

Handle gpersoon Vulnerability details Impact The function depositRewardTokens divides the "amount" of tokens by allocatedTokensPerEpoch to calculate the endEpoch. When "amount" isn't a multiple of allocatedTokensPerEpoch the result of the division will be rounded down, effectively losing a number...

White House Dark Web Marketplace Shuts Down its Operations

By Waqas The White House Dark Web Marketplace says “We are retiring!” meaning the marketplace is shutting down after years of a successful run. This is a post from HackRead.com Read the original post: White House Dark Web Marketplace Shuts Down its Operations...

OESA-2021-1370 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a devic...

CVE-2021-31605

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

DRUPAL-CONTRIB-2021-041

This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. This module has a vulnerability whereby users can select blocks as a menu item they don't have permission to view. The vulnerability is mitigated by the fact that it can on...

DRUPAL-CONTRIB-2021-040

This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. The module does not use CSRF tokens to protect routes for saving menu configurations. This vulnerability can be exploited by an anonymous user...

DRUPAL-CONTRIB-2021-039

This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. It does not sufficiently sanitize user input such that an admin with permissions to edit a menu may be able to exploit one or more Cross-Site-Scripting XSS vulnerabilities...

kubernetes input validation error vulnerability

Kubernetes is an open source Docker container cluster management system from the American Linux Foundation. The system provides resource scheduling, deployment operations, service discovery, and scale-up and scale-down for containerized applications. kubernetes has a security vulnerability that c...

kernel: powerpc: RTAS calls can be used to compromise kernel integrity

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

Monopolization of the bidding platform

Handle animixar Vulnerability details Impact This is potentially a low-to-medium risk vulnerability as this will lead to the platform being monopolized by a handful of people; preventing any adoption and growth. Proof of Concept A very few super-users with a lot of funds at their disposal can mak...