PT-2023-15198 · Unknown · Pi Websolution Css Js Manager +1

Name of the Vulnerable Software and Affected Versions: Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin versions = 2.4.49 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows a...

USN-5940-1: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

USN-5929-1: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

The vulnerability of the application for blocking advertisements and Pi-hole internet trackers arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a violator to execute arbitrary code.

The vulnerability of the Pi-hole ad blocking app exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fedora: Security Advisory for edk2 (FEDORA-2023-e821b64a4c)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Malicious code in libstringstringram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56edb7799c3257eaf10b770b175d6e5a223e08511c52592b85a87eb95231be34 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfrandompostint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 952a48d60596f9ebabb63de434509c03a9078c550337c1cc05c50f16cb4ff6e0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-grandccultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8dccfca06805bb0427ebf8ae86cbc3d64951c318fa9ac91115a9e65d69dcb16a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpmcencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7159662fc1ef9f7f1a469a048c7b18c4cda15426da940c45e99e1ce3c379da3b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libtoolosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c30497d51f870622831cb6ab36e9077877fcf74878f406519d2d354e6abe2b47 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-studyencodepep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6b91261cd1c5f251c493216cc48bb4cbc512a56101ea16012cbfc5c4caca4b14 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-randver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4786dea01d398c00f3d4aab9af385a46bce3583f271290923416ec31df54abf3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

SUSE CVE-2012-6647

The futexwaitrequeuepi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted...

SUSE CVE-2016-9393

The jpcpinextrpcl function in jpct2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

SUSE CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

SUSE CVE-2018-20845

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

SUSE CVE-2020-27841

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability...

Malicious code in requetss-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ffc78f1d671833c4f7434ac5c3279fae174b7aed78baabf9f5325b587d2b8693 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Pi-Hole Adminlte 路径遍历漏洞

Pi-Hole Adminlte is a control panel. It is used for statistics More... A path traversal vulnerability exists in Pi-Hole Adminlte version 3.1.0, which stems from the presence of directory traversal and can be exploited by a remote attacker to gain privilege escalation and view sensitive informatio...

Pi-hole Web Interface 4.x < 5.8.13 Insufficient Session Expiration Vulnerability

The Pi-hole Web Interface previously AdminLTE is prone to an insufficient session expiration vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...