CVE-2024-20350: Use of Hard-coded Cryptographic Key

A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...

kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()

In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy run-time warning in dgdispatchashost The Linux kernel CVE team has assigned CVE-2024-35944 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051920-CVE-2024-35944-a860@gregkh/T...

kernel: virtio-net: tap: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...

kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()

A vulnerability was found in the eventdeliver function in the Linux kernel's VMCI component, where the issue involves a lack of sanitization for the eventdata.event index controlled by user-space, which could lead to speculative information leaks...

PT-2024-40579 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as udiv, mrb bint mod, and mrb vm exe...

CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

SUSE CVE-2024-8354

A flaw was found in QEMU. An assertion failure was present in the usbepget function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition...

Wherever There's Ransomware, There's Service Account Compromise. Are You Protected?

Until just a couple of years ago, only a handful of IAM pros knew what service accounts are. In the last years, these silent Non-Human-Identities NHI accounts have become one of the most targeted and compromised attack surfaces. Assessments report that compromised service accounts play a key role...

CVE-2024-45862 Cleartext Storage of Sensitive Information in Kastle Systems Access Control System

Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive information...

Brave Desktop 1.70.117 Security Fixes

Added simulation support for EVM transactions. - Added simulation support for Solana transactions. Upgraded Chromium to 129.0.6668.59 — refer to Google Chrome advisories for inherited CVEs...

SUSE CVE-2024-46794

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

PT-2024-31818

Name of the Vulnerable Software and Affected Versions Kastle Systems firmware prior to May 1, 2024 Description The issue concerns the storage of machine credentials in cleartext, which may allow an attacker to access sensitive information. Recommendations For Kastle Systems firmware prior to May ...

Malicious code in rnjnioep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d4b28e75016946748cc0f573ed6ef13f6ba19871339cae87de357a7ceba6e6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-8287

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this...

CVE-2024-8287

CVE-2024-8287 affects Anbox Management Service (AMS) versions 1.17.0–1.23.0. AMS does not validate the TLS certificate from the Anbox Stream Agent, enabling potential MITM from within an internal network. CVSS v3.1 base score 7.5 (HIGH) across confidentiality, integrity, and availability impacts;...

CVE-2024-45858

An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing i...

AZL-53295 CVE-2024-46794 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

DEBIAN-CVE-2024-46794

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

DEBIAN-CVE-2024-46739

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix kernel NULL pointer dereference in hvuiorescind For primary VM Bus channels, primarychannel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for...