RHEL 9 : openssl (RHSA-2024:0500)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0500 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

Malicious code in wlwz-2312-4503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf9156272fc976e982b48026338167a18686a6ef1a6af4c2f405486c2c82375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qualcomm WLAN October 2023 Security Update

Potential vulnerabilities were identified in the Qualcomm WLAN Driver for certain HP PC products, which might allow arbitrary code execution or information disclosure. Qualcomm has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding...

LockBit Ransomware Gang Claims Subway as New Victim

By Deeba Ahmed From Footlongs to Stolen Bytes: Subway Faces Potential Ransomware Nightmare. This is a post from HackRead.com Read the original post: LockBit Ransomware Gang Claims Subway as New Victim...

FreeBSD : zeek -- potential DoS vulnerability (fedf7e71-61bd-49ec-aaf0-6da14bdbb319)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fedf7e71-61bd-49ec-aaf0-6da14bdbb319 advisory. - Tim Wojtulewicz of Corelight reports: A specially-crafted series of packets containing nested MIME...

Design/Logic Flaw

A use-after-free flaw was found in the ext4remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free...

CVE-2024-0775

A use-after-free flaw was found in the ext4remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free...

AlmaLinux 9 : openssl (ALSA-2024:0310)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:0310 advisory. - Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncation or overruns during...

PT-2024-13402 · Unknown · Multisigwallet

Name of the Vulnerable Software and Affected Versions: MultiSigWallet version 0xF0C99 Description: A reentrancy issue was found in the executeTransaction function of MultiSigWallet. This issue could potentially be exploited. Recommendations: For MultiSigWallet version 0xF0C99, consider disabling...

Type confusion

Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EulerOS Virtualization 2.9.0 : scipy (EulerOS-SA-2023-3108)

According to the versions of the scipy package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function...

CentOS 8 : opensc (CESA-2023:7876)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:7876 advisory. - A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographi...

UC Software - Improper Neutralization of Special Elements Used in an OS Command

A potential vulnerability was discovered in certain Poly voice products. A flaw in the neutralization of data passed in the input fields within the web UI could result in an authenticated command injection. HP has identified affected products and corresponding firmware minimum versions that...

Django -- multiple vulnerabilities

Django reports: CVE-2024-24680:Potential denial-of-service in intcomma template filter...

Poisoned Data, Malicious Manipulation: NIST Study Reveals AI Vulnerabilities

By Waqas NIST Unveils Insights on AI Vulnerabilities and Potential Threats.w This is a post from HackRead.com Read the original post: Poisoned Data, Malicious Manipulation: NIST Study Reveals AI Vulnerabilities...

Reliance on unknown governorCheckProposalId is a potential backdoor and risks loss of critical function control

Lines of code Vulnerability details Impact The GuardCM contract is designed to restrict the actions of the Community Multisig CM. However, a potential backdoor could allow the CM to bypass these restrictions and gain unrestricted access. The issue arises from the reliance on a specific proposal I...

UC Software - Use of Insufficiently Random Values

A potential vulnerability was discovered in certain Poly devices. A potential flaw allows an attacker to predict a session and piggyback onto an active administrator session of the web server. The potential vulnerability is dependent on the administrator maintaining an active session. HP has...

CVE-2023-51779

A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg and btsockioctl functions could lead to a use-after-free on a socket buffer "skb". This flaw allows a local user to cause a denial of service condition or potential code execution...

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

Path traversal

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...