CVE-2024-35468: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter...

CLSA-2024-1716980150 Fix of 12 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26929 - scsi: qla2xxx: Fix double free of fcport CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client: fix use-after-free...

Fedora: Security Advisory for rust-pretty-bytes (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-pretty-bytes-0.2.0-6.fc40

Convert bytes to a human readable string...

SUSE CVE-2021-47405

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418a...

HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up

...

kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c

A flaw was found in the Linux kernel's implementation of GTCO tablet/digitizer's version of the parsehidreportdescriptor in drivers. An attacker with local access could use this flaw to create a specially crafted USB device inserted into the host to corrupt memory, trigger an out-of-bounds write...

kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c

A flaw was found in the Linux kernel's implementation of GTCO tablet/digitizer's version of the parsehidreportdescriptor in drivers. An attacker with local access could use this flaw to create a specially crafted USB device inserted into the host to corrupt memory, trigger an out-of-bounds write...

DEBIAN-CVE-2021-47405

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a vulnerability in the HID:usbhid module...

DEBIAN-CVE-2024-35997

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...

UBUNTU-CVE-2024-35997

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...

North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign

The North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware. "The threat actor created a Facebook account with a fake identity disguised as a public official...

evoltree (0.0.7), human-parsing (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2024-4263 via mlflow (1.15.0)

mlflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - evoltree 0.0.7 - human-parsing =0.0.1, =0.3.15, =0.1.0, =0.1.1 Source cves: CVE-2024-4263 Source advisory: OSV:GHSA-P4JX-Q62P-X5JR...

Linux kernel HID driver Heap Buffer Overflow Info Disclosure

The vulnerability of the hidoutputreport function in the drivers/hid/hid-core.c module of the Linux kernel’s HID driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Linux I2C HID Buffer Overflow DoS

The vulnerability of the i2chidofprobe function in the drivers/hid/i2c-hid/i2c-hid-of.c file of the HID device driver for I2C devices in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-34222

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

CVE-2024-34220

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

Talos joins CISA to counter cyber threats against non-profits, activists and other at-risk communities

Cisco Talos is delighted to share updates about our ongoing partnership with the U.S. Cybersecurity and Infrastructure Security Agency CISA to combat cybersecurity threats facing civil society organizations. Talos has partnered with CISA on several initiatives through the Joint Cyber Defense...