[SECURITY] Fedora 41 Update: cups-2.4.10-7.fc41

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

The vulnerability of the `inc` function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inc function in the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector

Microsoft has revealed that a financially motivated threat actor has been observed using a ransomware strain called INC for the first time to target the healthcare sector in the U.S. The tech giant's threat intelligence team is tracking the activity under the name Vanilla Tempest formerly DEV-083...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which stems from an application that may cause a denial of service...

Photon OS 4.0: Linux PHSA-2024-4.0-0691

An update of the linux package has been released. File data PhotonOSPHSA-2024-40-0691linux.nasl...

Ransomware Groups Demystified: Lynx Ransomware

As part of our research and tracking of threats, Rapid7 Labs is actively monitoring new and upcoming threat groups and the ransomware domain is known for having a large number of them. In the Ransomware Radar Report, Rapid7 Labs shared the observation that in the first half of 2024, 21 new or...

Utarit SoliClub 信息泄露漏洞

Utarit SoliClub is a mobile application from Utarit, Inc. Utarit SoliClub has an information disclosure vulnerability that stems from the inclusion of a sensitive information disclosure issue...

JVN#05579230: Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery

Multiple Alps System Integration products and the OEM products contain a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the software or apply the workaround Update the software to t...

Photon OS 4.0: Linux PHSA-2024-4.0-0678

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0678. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

JVN#49873988: Secure Boot bypass Vulnerability in PRIMERGY

PRIMERGY is an IA server provided by Fsas Technologies Inc. PRIMERGY contains a vulnerability where Secure Boot function is bypassed. This is due to a vulnerability called "PKFail" CVE-2024-8105, which was publicly disclosed by Binarly. Impact The product's Secure Boot function may be bypassed an...

Fedora 39 : python3.13 (2024-992047a33f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-992047a33f advisory. Security fix for CVE-2024-8088 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 40 : kernel (2024-8bda3bcaea)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8bda3bcaea advisory. The 6.10.7 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

CVE-2024-44984 bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

CVE-2024-44958 sched/smt: Fix unbalance sched_smt_present dec/inc

In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance schedsmtpresent dec/inc I got the following warn report while doing stress test: jump label: negative count! WARNING: CPU: 3 PID: 38 at kernel/jumplabel.c:263 statickeyslowtrydec+0x9d/0xb0 Call Trace:...

CVE-2024-7078

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection. This issue affects Semtek Sempos: through 31072024...

CVE-2024-7076

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Blind SQL Injection. This issue affects Semtek Sempos: through 31072024...

CVE-2024-7077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS. This issue affects Semtek Sempos: through 31072024...

CVE-2024-7078

The CVE-2024-7078 entry concerns an SQL Injection vulnerability in Semtek Sempos (Semtek Informatics Software Consulting Inc.), caused by improper neutralization of special elements in SQL commands. Affected product: Semtek Sempos versions up to 31072024. Impact is high in terms of confidentialit...

CVE-2024-7077 Reflected XSS in Semtek Informatics Software's Semtek Sempos

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS. This issue affects Semtek Sempos: through 31072024...

CVE-2024-7077

CVE-2024-7077 is a Reflected XSS in Semtek Sempos from Semtek Informatics Software Consulting Inc. Semtek Sempos, affected through 31072024. The issue arises from improper neutralization of input during web page generation, enabling a reflected cross-site scripting vulnerability. Multiple feeds (...