Malicious code in @zalastax/nolb-_gue (npm)

The package @zalastax/nolb-gue was found to contain malicious code...

CVE-2024-7596: Undefined Security Weakness

Proposed Generic UDP Encapsulation GUE IETF Draft do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can ...

DEBIAN-CVE-2024-44940

In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in guegroreceive on unsupported protocol Drop the WARNONONCE inn guegroreceive if the encapsulated type is not known or does not have a GRO handler. Such a packet is easily constructed. Syzbot generates them and...

PT-2024-7193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function gue gro receive in the Linux kernel, which has a problem with incorrect input validation. This can potentially impact the confidentiality, integrity,...

gue-seattle.org Cross Site Scripting vulnerability OBB-3903753

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Unfixed XSS vulnerability at www.gue-ngl.org

Security researcher RubberDuck, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.gue-ngl.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is currently...