PT-2025-47506

Name of the Vulnerable Software and Affected Versions Rallly versions prior to 4.5.4 Description An insecure direct object reference IDOR issue exists in Rallly, allowing authenticated users to delete arbitrary participants from polls without proper ownership verification. The issue stems from th...

kernel: xen-netfront: Fix NULL sring after live migration

A flaw was found in the Linux kernel's xen-netfront component. During a live migration of a virtual machine, the Networked Asynchronous Packet Interface NAPI for the old network shared ring sring is not properly removed before a new one is established. A local attacker with low privileges could...