PT-2022-30387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-30393

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a problem where a queue kobject is deleted before its children, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have...

PT-2022-29856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a potential security problem where a queue kobject is deleted before its children. The actual impact and attack plausibility have not yet been proven. Recommendations...

Metasploit Weekly Wrap-Up

ManageEngine ADSelfService Plus Authenticated RCE This module is pretty exciting for us because it's for a vulnerability discovered by our very own Rapid7 researchers Jake Baines, Hernan Diaz, Andrew Iwamaye, and Dan Kelly. The vulnerability allowed for attackers to leverage the "custom script"...

GHSA-86R3-4GQ8-XW8Q Remote Code Execution in Laravel

Withdrawn This advisory has been withdrawn because it is not a security issue and the CVE has been revoked. Original Description A Remote Code Execution RCE vulnerability exists in h laravel 5.8.38 via an unserialize pop chain in 1 destruct in \Routing\PendingResourceRegistration.php, 2 cal in...

Number withdrawal

Laravel, a web application framework from the Laravel Team Laravel, has a security vulnerability that stems from a vulnerability in 1 RoutingPendingResourceRegistration.php via destruct, 2 cal in QueueCapsuleManager.php and 3 the deserialization pop-up chain invoke in...

PT-2025-8246

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak was found in the Linux kernel, specifically in the r871xu drv init function. This issue occurs when r8712 init drv sw fails, causing memory allocated by r8712 all...

Security Bulletin: IBM Robotic Process Automation before 21.0.2 and 21.0.1.2 could allow a queue to be deleted by a registered user.

Summary IBM Robotic Process Automation before 21.0.2 and 21.0.1.2 could allow a queue to be deleted by a registered user. This could cause a disruption on any RPA scripts dependent on queues. Vulnerability Details CVEID: CVE-2022-22319 DESCRIPTION: IBM Robotic Process Automation could allow a...

CreateWiki Authorization Issue Vulnerability

CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. A security vulnerability exists in CreateWiki that stems from the ability to use Special:RequestWikiQueue for anonymous comments when sent directly via POST...

PT-2022-16893 · Miraheze · Createwiki

Name of the Vulnerable Software and Affected Versions: CreateWiki affected versions not specified Description: CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent...

Qualcomm chip code issues and vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A code issue vulnerability exists in multiple Qualcomm...

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state potentially allowing a local user to gain privileged access or cause a denial of service on the system.

...

CVE-2022-0995

An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

DEBIAN-CVE-2022-0995

An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

UBUNTU-CVE-2022-0995

An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

Vulnerability fixed in IBM MQ

IBM has fixed a vulnerability in IBM MQ. The vulnerability allows an authenticated malicious party to cause a denial-of-service exploit. IBM has released updates to fix the vulnerability. For more information, see: https://www.ibm.com/support/pages/node/6560040...

PT-2025-8122

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7 Description A vulnerability in the Linux kernel has been identified, specifically in the bcmgenet module. The issue arises due to the compiler's optimization of register read and write operations, whic...

PT-2025-8184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the watch queue functionality. The free watch function fails to properly free the watch object, leading to a...

PT-2025-8185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue in the watch queue set size function can occur when the error cleanup code attempts to free buffer pages that were not allocated. This can lead to a null pointer...

PT-2022-29053

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.17 through 5.15.26 Description A potential security issue exists in the xen/netfront component. The issue is related to the destruction of queues before the real num tx queues variable is zeroed. The actual impact an...