CVE-2024-35888 erspan: make sure erspan_base_hdr is present in skb->head

In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspanbasehdr is present in skb-head syzbot reported a problem in ip6erspanrcv 1 Issue is that ip6erspanrcv and erspanrcv no longer make sure erspanbasehdr is present in skb linear part skb-head before getting...

CVE-2024-35888 erspan: make sure erspan_base_hdr is present in skb->head

In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspanbasehdr is present in skb-head syzbot reported a problem in ip6erspanrcv 1 Issue is that ip6erspanrcv and erspanrcv no longer make sure erspanbasehdr is present in skb linear part skb-head before getting...

CVE-2024-31980

A vulnerability has been identified in Parasolid V35.1 All versions V35.1.256, Parasolid V36.0 All versions V36.0.210, Parasolid V36.1 All versions V36.1.185. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted XT part fil...

CVE-2024-31980

A vulnerability has been identified in Parasolid V35.1 All versions V35.1.256, Parasolid V36.0 All versions V36.0.210, Parasolid V36.1 All versions V36.1.185. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted XT part fil...

CVE-2024-31980

A vulnerability has been identified in Parasolid V35.1 All versions V35.1.256, Parasolid V36.0 All versions V36.0.210, Parasolid V36.1 All versions V36.1.185. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted XT part fil...

CVE-2024-31980

The CVE-2024-31980 issue affects Siemens Parasolid: V35.1 (all < V35.1.256), V36.0 (all < V36.0.210), and V36.1 (all

PT-2024-3626 · Siemens · Parasolid

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V35.1.256 Parasolid versions prior to V36.0.210 Parasolid versions prior to V36.1.185 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end...

amavisd-new -- multipart boundary confusion

The Amavis project reports: Emails which consist of multiple parts Content-Type: multipart/ incorporate boundary information stating at which point one part ends and the next part begins. A boundary is announced by an Content-Type header's boundary parameter. To our current knowledge, RFC2046 and...

Null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: sii902x: Fix probing race issue A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge: 53.271356 sii902xgetedid+0x34/0x70 sii902x 53.276066 sii902xbridgegetedid+0x14/0x20 sii90...

RHEL 9 : thunderbird (RHSA-2024:0984)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0984 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.8.0. Security Fixes: Mozilla:...

Cross-Site Scripting

liferay portal is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation in the portlet.js module of the Frontend JS library. This flaws allowing attackers to inject arbitrary web script or HTML via the anchor hash part of a URL...

CVE-2024-23137

A maliciously crafted STP or SLDPRT file, when parsed in ODXSWDLL.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23125

A maliciously crafted SLDPRT file when parsed ODXSWDLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

AZL-44026 CVE-2024-24479 affecting package wireshark 4.0.8-1

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/tostr.c, and formatfractionalpartnsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected...

PT-2024-1856 · Wireshark +1 · Wireshark +1

Name of the Vulnerable Software and Affected Versions: Wireshark versions prior to 4.2.0 Description: The issue is related to a buffer overflow in the format fractional part nsecs function of Wireshark, which can be exploited by a remote attacker to cause a denial of service. This is due to the...

Say Goodbye to Monolithic EdgeWorkers: Introducing Flexible Composition (Part 2)

...

The Web Scraping Problem: Part 1

...

CVE-2023-49129

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected applications contain a stack overflow vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update

Description The plugin does not properly secure some of its AJAX actions, allowing any logged-in users to modify its settings. fetch"/wp-admin/admin-ajax.php", "headers": "content-type": "multipart/form-data; boundary=----WebKitFormBoundaryvEIqF0bdJXlPN58D", , "body":...

Weather Wonders: A Guide to Crafting a Dynamic App Using Weather APIs

By Owais Sultan Weather applications have become an integral part of our daily lives. These apps, which provide us with real-time… This is a post from HackRead.com Read the original post: Weather Wonders: A Guide to Crafting a Dynamic App Using Weather APIs...