CVE-2024-35971

In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The ks8851irq thread may call ks8851rxpkts in case there are any packets in the MAC FIFO, which calls netifrx. This netifrx implementation is guarded by...

CVE-2024-35982 batman-adv: Avoid infinite loop trying to resize local TT

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loop trying to resize local TT If the MTU of one of an attached interface becomes too small to transmit the local translation table then it must be resized to fit inside all fragments when enabled or a...

CVE-2024-35973

The Linux kernel contains a vulnerability in the geneve tunnel helper where pskb_inet_may_pull() fails to perform proper header validation because it relies on skb->protocol instead of skb_protocol(skb, true). This allows an uninitialized value to be triggered in geneve_xmit() when a VLAN tag ...

CVE-2024-35973 geneve: fix header validation in geneve[6]_xmit_skb

In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in genevexmit 1 Problem : While most ip tunnel helpers like iptunnelgetdsfield uses skbprotocolskb, true, pskbinetmaypull is only using...

CVE-2024-35973 geneve: fix header validation in geneve[6]_xmit_skb

In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in genevexmit 1 Problem : While most ip tunnel helpers like iptunnelgetdsfield uses skbprotocolskb, true, pskbinetmaypull is only using...

Tenda AX9 Wi-Fi Router Code Execution

The vulnerability of the /goform/setMacFilterCfg component in the Tenda AX9 Wi-Fi router software lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the deviceList parameter...

Tenda AX12 Wi-Fi Router Code Execution

The vulnerability of the /goform/setMacFilterCfg component in the Tenda AX12 Wi-Fi router software relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the deviceList parameter...

DEBIAN-CVE-2024-35913

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...

CVE-2024-5096

CVE-2024-5096 affects Hipcam Device up to 20240511 in the MAC Address Handler component, specifically the /log/wifi.mac file. The issue allows remote exploitation leading to information disclosure. The vulnerability is described consistently across multiple sources, and publicly disclosed exploit...

CVE-2024-5096 Hipcam Device MAC Address wifi.mac information disclosure

A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the component MAC Address Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

CVE-2024-5096 Hipcam Device MAC Address wifi.mac information disclosure

A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the component MAC Address Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

CVE-2024-5096: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic was found in Hipcam Device up to 20240511. This vulnerability affects unknown code of the file /log/wifi.mac of the component MAC Address Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

PT-2024-34472

Name of the Vulnerable Software and Affected Versions: Hipcam Device up to 20240511 Description: A vulnerability was found in the MAC Address Handler component of the Hipcam Device, affecting the file /log/wifi.mac. This issue leads to information disclosure and can be initiated remotely. The...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002: Exploiting Git RCE via git clone This repos...

FortiClient MAC Protection Code Execution

The vulnerability of the FortiClient for MAC protection tool is related to incorrect external manipulation of the file name or file path. Exploiting this vulnerability allows an attacker to execute arbitrary code by writing the malicious file to the /tmp directory...

Mozilla Firefox ESR Security Update (MFSA2024-22) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Thunderbird Security Update (MFSA2024-23) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Firefox Security Update (MFSA2024-21) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2023-46689

Improper neutralization in IntelR Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-13291 · Intel · Intel Power Gadget

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS all versions Description: The issue is related to incomplete cleanup in the software, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For...