Malicious code in storm-he-cassandra-shishi-fenxi (npm)

The package storm-he-cassandra-shishi-fenxi was found to contain malicious code...

MAL-2025-46145 Malicious code in storm-he-cassandra-shishi-fenxi (npm)

The package storm-he-cassandra-shishi-fenxi was found to contain malicious code...

UBUNTU-CVE-2023-4515

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed "ksmbd: validate command payload size", except for SMB2OPLOCKBREAKHE command, the request size of other commands is not checked, it's not expected. Fix it by add check f...

UBUNTU-CVE-2025-38509

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject VHT opmode for unsupported channel widths VHT operating mode notifications are not defined for channel widths below 20 MHz. In particular, 5 MHz and 10 MHz are not valid under the VHT specification and must...

Malicious code in @zalastax/nolb-_he (npm)

The package @zalastax/nolb-he was found to contain malicious code...

CVE-2024-48540

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

Linux Distros Unpatched Vulnerability : CVE-2024-46827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point...

CVE-2024-48540

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48540

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

PT-2024-33139 · Unknown · Xiao He Smart

Name of the Vulnerable Software and Affected Versions: XIAO HE Smart version 4.3.1 Description: The issue is related to incorrect access control, allowing attackers to access sensitive information by analyzing the code and data within the APK file. Recommendations: For XIAO HE Smart version 4.3.1...

XIAO HE Smart 安全漏洞

XIAO HE Smart is a product of XIAOHELJ XIAOHELJ. A security vulnerability exists in XIAO HE Smart version 4.3.1 that stems from incorrect access control...

CVE-2024-48540

The XIAO HE Smart application, version 4.3.1 , is affected by an incorrect access control vulnerability. This flaw allows attackers to gain access to sensitive information by analyzing the code and data contained within the APK file . At this time, there is no information regarding a newer versio...

CVE-2024-48540: Incorrect Authorization

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48540

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

DEBIAN-CVE-2024-47738

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 "wifi: mac80211: don't use rate mask for scanning", ignore incorrect settings to avoid no supported rate warning reported by syzbot. The...

CVE-2024-47738 wifi: mac80211: don't use rate mask for offchannel TX either

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 "wifi: mac80211: don't use rate mask for scanning", ignore incorrect settings to avoid no supported rate warning reported by syzbot. The...

CVE-2024-47738

CVE-2024-47738 affects the Linux kernel’s wifi subsystem (mac80211). The vulnerability lies in handling rate masks for offchannel TX, where an incorrect rate mask could trigger a -EINVAL/unsupported rate warning. The advisory notes that the root cause was traced to a chain of commits, with the pr...

SUSE CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

DEBIAN-CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

UBUNTU-CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...