Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Use raw spinlock for cgrlock The smpcallfunction always runs its callback in a hard IRQ context, even when running under PREEMPTRT, where spinlocks may be in a sleeping state. Therefore, we need to use a raw...

EUVD-2005-4225

Malware in sbrugna...

EUVD-2005-4226

Malware in sbrugna...

EUVD-2009-4317

Malware in sbrugna...

CVE-2023-53330 caif: fix memory leak in cfctrl_linkup_request()

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrllinkuprequest When linktype is unknown or kzalloc failed in cfctrllinkuprequest, pkt is not released. Add release process to error path...

PT-2025-38048

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was identified in the cfctrl linkup request function within the caif module of the Linux kernel. Specifically, when the link type is unknown or memory allocation via...

ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

...

DEBIAN-CVE-2025-21887

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup The issue was caused by dputupper being called before ovldentryupdatereval, while upper-dflags was still accessed in ovldentryremote. Move dputupper after its last...

PT-2024-11347 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.4 Description: A deadlock vulnerability has been resolved in the Linux kernel. The issue occurs when the cfg80211 unregister wdev function is called while the link is still up, causing a deadlock due to the...

SD-WAN Virtual Path DEAD and path NOT sending VP headbeart

Virtual PathVP between SD-WAN MCNmaster control node and all branches is DEAD. In MCN GUI statistic, Virtual Path detailed VP status shows dead reason is "SILENCE". MCN---Branch direction path. NO hearbeat being sent out from "kbps" column with 0 results. MCN could receive branch's heartbeat...

Link Up Gold CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Link Up Gold CSRF Author: Jonturk75 Category:: webapps Demo : http://demo.scripts-gate.com/LinkUpGold/administration Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-14...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

The CVE-2009-4349 entry describes a CSRF vulnerability in Link Up Gold 5.0 affecting the file path administration/administrators.php . The underlying issue allows remote attackers to hijack the authentication of administrators to create new administrative accounts. This is the explicit impact sta...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Link Up Gold CSRF - Create Administrator Account

Exploit for unknown platform in category web applications ================================================ Link Up Gold CSRF - Create Administrator Account ================================================ /\ == \ /\ \ /\ \ \ \ input type="h...

CVE-2005-4230

SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter...

CVE-2005-4231

Cross-site scripting XSS vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 link parameter to tellfriend.php, 2 phrase parameter to search.php in a searchlinksadvanced action, and the 3 direction or 4 sort parameter to articles.php...

CVE-2005-4230

CVE-2005-4230 concerns an SQL injection in poll.php of Link Up Gold 2.5 and earlier, exploitable via the number parameter to allow remote execution of arbitrary SQL commands. The core affected software is Link Up Gold (versions up to 2.5 and older). The cited sources (NVD entry) confirm the vulne...

CVE-2005-4231

The CVE-2005-4231 entry relates to a cross-site scripting (XSS) flaw in Link Up Gold 2.5 and earlier. The vulnerability arises from injectable input in multiple vectors: (1) the link parameter to tell_friend.php, (2) the phrase[] parameter to search.php in a search_links_advanced action, and (3)/...