CVE-2024-45731 Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could write a file to the Windows system root directory, which has a default location in the Windows System32 folder, when Splunk Enterprise for...

MAL-2024-9141 Malicious code in d40tmf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4866ac2f2461e74cfa4509e5237bcbfbaae69a548dde50b492463051daa8baed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owqhxw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beae6c77c9a8708ea7619fe8393991b7143c2b306569693c9771cd0c6674c0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

octeontx2-af: Use separate handlers for interrupts

...

CVE-2024-44951

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with a logic analyzer that the received packet on...

CVE-2024-44951 serial: sc16is7xx: fix TX fifo corruption

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with a logic analyzer that the received packet on...

CVE-2024-44951

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with a logic analyzer that the received packet on...

CVE-2024-44951

Idea: CVE-2024-44951 affects the Linux kernel’s serial driver for sc16is7xx (TX/RX channel handling).What’s affected: The regression caused by commit 4409df5866b7 that changed EFR locking to operate per channel introduced TX buffer data corruption where data from channel A could be written into c...

CVE-2024-44951 serial: sc16is7xx: fix TX fifo corruption

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with a logic analyzer that the received packet on...

Malicious code in intl.walmart.cca.webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663678906f8c3cc94e69d26183d0757c295a9f04195749cd05c3260b980db1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quisquam-libero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee23f30c5276a08fd77ced365412977b59424abdcc6a1e0ebca764fc53a9dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/maiores-quae-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ced5fe74d45d3dcfb604bd5ce66bad9b4eea2699b321e72f20a04cc83d7cf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8396 Malicious code in @diotoborg/laboriosam-eos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cbbb48c7b88fa6421d317a4da7f2e3536d4c6cc99235b81a7a8a592b7504b60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quae-nesciunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824f173c001d71ea09d9d7710add0ff3cb588f24c064118040f081dc5f3b0e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in milo-core-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c235fbc0abe4f5f5c994143c988c2bfd0a701e5664e62af0a373d40aeb0af8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-7185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a regression introduced by a commit that changed the EFR locking to operate on each channel instead of chip-wise. This regression causes the Tx buffer data on one...

Malicious code in @zitterorg/illum-perferendis-consectetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c3bf9aa992411b0245993a478b6e6618a7ceb089afc8b5a9abbc82eb88e72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/asperiores-consectetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af535ebd3a585f16b4ef33b0b5637095d342093e1eb9462ea6248f5c225c1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7100 Malicious code in @zitterorg/a-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d588932fe93beb0fc18992cbac0686d1aa364310aff0198e2fe533fea2e0e521 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...