SUSE CVE-2022-0980

Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interactions...

SUSE CVE-2022-1451

Out-of-bounds Read in rbinjavaconstantvalueattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

SUSE CVE-2022-21703

Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerability which allows attackers to elevate their privileges by mounting cross-origin attacks against authenticated high-privilege Grafana users for example,...

SUSE CVE-2022-27943

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new...

SUSE CVE-2022-31214

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

SUSE CVE-2022-34302

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader...

SUSE CVE-2023-0215

The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the...

CVE-2021-0801

CVE-2021-0801 is listed in the Android 12 security release notes under the Framework category with Type ID and Severity Moderate. The provided documents do not expose the exact root cause, affected subcomponent, exploit details, or remediation/patch information for this CVE. No public technical d...

CVE-2021-0737

CVE-2021-0737 is listed under Android 12, Framework, with a vulnerability type of Elevation of Privilege (EoP) and a High severity rating. The Android 12 security release notes enumerate this CVE among issues fixed as part of the Android 12 update, indicating that affected devices with Android 12...

CVE-2021-0711

CVE-2021-0711 is listed in Android 12 Release Notes under the System category with Type: Information Disclosure (ID) and Severity: Moderate. The document does not provide specific affected component details beyond the Android 12 context. It states that issues addressed as part of Android 12 are m...

Use-after-free following BIO_new_NDEF

...

PT-2023-35114 · Unknown · Openvswitch

Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v5.15.93 Description: A memory leak issue was discovered in the ovs flow cmd new function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.15.86 and is...

Upgraded Q -> 2 from #525 [1676219014177]

Judge has assessed an item in Issue 525 as 2 risk. The relevant finding follows: Upgradeable contract is missing a gap50 storage variable to allow for new storage variables in later versions --- The text was updated successfully, but these errors were encountered: All reactions...

A Hacker’s Mind Is Now Published

Tuesday was the official publication date of A Hackers Mind: How the Powerful Bend Societys Rules, and How to Bend them Back. It broke into the 2000s on the Amazon best-seller list. Reviews in the New York Times, Cory Doctorows blog, Science, and the Associated Press. I wrote essays related to th...

CLSA-2023-1676026276 openssl: Fix of 2 CVEs

CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...

CLSA-2023-1676025915 openssl: Fix of 2 CVEs

CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...

CLSA-2023-1676025596 openssl: Fix of 2 CVEs

CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...

ChiKoi 1.0 Directory Traversal

==================================================================================================================================== | Title : ChiKoi version 1.0 Directory Traversal Vulnerability Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...

SUSE: Security Advisory (SUSE-SU-2023:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A Hackers Pot of Gold: Your MSP's Data

A single ransomware attack on a New Zealand managed service provider MSP disrupted several of its clients' business operations overnight, most belonging to the healthcare sector. According to the country's privacy commissioner, "a cyber security incident involving a ransomware attack" in late...