CGA-XX78-32C8-GHMH

Bulletin has no description...

CGA-VC2C-XH7X-RVCJ

Bulletin has no description...

CGA-RWX8-75RR-XHRH

Bulletin has no description...

CGA-4Q5P-5WG2-X27J

Bulletin has no description...

CVE-2024-40952 ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2journaldirty bdev-bdsuper has been removed and commit 8887b94d9322 change the usage from bdev-bdsuper to bassocmap-host-isb. This introduces the following NULL pointer dereference in...

Gitlab -- vulnerabilities

Gitlab reports: An attacker can run pipeline jobs as an arbitrary user Developer user with admincomplianceframework permission can change group URL Admin push rules custom role allows creation of project level deploy token Package registry vulnerable to manifest confusion User with admingroupmemb...

MAL-2024-10125 Malicious code in pystlete (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5d093c6ce26c2d62ba07cc7fc8e0a5441f9e58bfc62943f6032dad8abefde57 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-kiwi-infostealer Reasons based on the campaign: -...

[SECURITY] Fedora 39 Update: rust-sequoia-openpgp-1.21.1-1.fc39

OpenPGP data types and associated machinery...

PMS 2024 1.0 SQL Injection

Titles: PMS-2024 - PHP by: oretnom23 v1.0 Multiple SQLi Author: nu11secur1ty Date: 07/06/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html Reference: https://portswigger.net/web-security/sql-injection...

Realtek rtl819x Jungle SDK boa updateConfigIntoFlash integer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1877 Realtek rtl819x Jungle SDK boa updateConfigIntoFlash integer overflow vulnerability July 8, 2024 CVE Number CVE-2023-45742 SUMMARY An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK...

Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to

Impact The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when determining whether or not to include a truncated version of the original...

CGA-R68P-F5HC-GCCH

Bulletin has no description...

CGA-RFP7-V98R-27GV

Bulletin has no description...

MAL-2024-10133 Malicious code in python-guild (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e80e97d90a6fe86d94b3d80feac7f7f53e0eb1ee29320ebb7612cdf7a5449f3d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-10161 Malicious code in sol-structs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d466f5d94859498aa97e45fc82060c447a3004b4ea16e620a3fcc58ed8cfb3e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

GO-2024-2936 PocketBase performs password auth and OAuth2 unverified email linking in github.com/pocketbase/pocketbase

PocketBase performs password auth and OAuth2 unverified email linking in github.com/pocketbase/pocketbase...

MAL-2024-10069 Malicious code in openrea (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feed5259de4613688d3df61d379566403b7a9e8981937c3b450a7cdc8a99e101 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10075 Malicious code in openseaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5428b21b872ea57a73c1e7932fa333e90bb7c42f3a7b72f29569005158d1fc34 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10146 Malicious code in pytyon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e88db6ad57b1091a374c932c28502eb03c3cbb191976d0d45d3179953e26d44d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10213 Malicious code in weeb3-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 40becddeae204dc62ec3b068dd7018b94f5a2b1ba4cdd9e68244602e06b5f257 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...