PT-2024-35151 · Suse · Hackweek

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a stored XSS attack that occurs due to missing sanitation of inputs. This allows arbitrary users to conduct the attack, which...

CVE-2024-36248

API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...

PT-2024-9104 · Fuji Electric · Fuji Electric Monitouch V-Sft

Name of the Vulnerable Software and Affected Versions: Fuji Electric Monitouch V-SFT affected versions not specified Description: The issue is related to an out-of-bounds write in the parsing of V9C files, which can be exploited by remote attackers to execute arbitrary code on affected...

PT-2024-36957

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A potential out-of-bound access issue has been identified in the Linux kernel, specifically in the fill frame info function. This issue can be triggered by sending a packet with 14 bytes,...

The vulnerability of the hns3 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the hns3getcoalinfo function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-26930 · Sharp +1 · Multiple Mfps

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue involves hardcoded API keys for some cloud services in the "main" binary, posing security risks. The details of affected product...

CVE-2020-12492

Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information...

PT-2024-35784

Name of the Vulnerable Software and Affected Versions masterstack imgcap version 0.0.1 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/submit" endpoint. Recommendations For masterstack imgcap version 0.0.1, as a temporary workaround, consider...

CVE-2024-11229

creationtimestamp| type| source ---|---|--- 2024-11-23 11:42:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113532087565057168...

Astra Linux – Vulnerability in curl

Libcurl’s ASN1 parser code includes the GTime2str function, which is used to parse an ASN.1 Generalized Time field. If a syntactically incorrect field is provided, the parser may end up using -1 as the length of the time fraction. This causes a strlen operation to be performed on a pointer to a...

CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

SUSE CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

The vulnerability of the msp_info_htm function in D-Link DI-8400 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the mspinfohtm function in D-Link DI-8400 router microprogramming software is related to the lack of measures taken to neutralize special elements used in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands when processing the flag a...

DEBIAN-CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

CVE-2024-53092 virtio_pci: Fix admin vq cleanup by using correct info pointer

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

D-Link DI-8200 安全漏洞

The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...

CVE-2018-9482

In intrdatacopycb of btifhd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2024-52303

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each...