Live Membership Management System 1.0 Code Injection

============================================================================================================================================= | Title : Live Membership Management System version 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser ...

The vulnerability of the H5T__ref_mem_setnull() function in the H5Tref.c file of the HDF5 library allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the H5Trefmemsetnull function in the H5Tref.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the kvm_set_cpuid function in the include/linux/slab.h library of the KVM virtualization subsystem in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the kvmsetcpuid function in the include/linux/slab.h library of the KVM virtualization subsystem in the Linux kernel is related to improper release of the kvmcpuidentry2 array. Exploiting this vulnerability can allow an attacker to cause a system failure...

SUSE CVE-2023-52424

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive th...

CVE-2024-46703 Revert "serial: 8250_omap: Set the console genpd always on if no console suspend"

In the Linux kernel, the following vulnerability has been resolved: Revert "serial: 8250omap: Set the console genpd always on if no console suspend" This reverts commit 68e6939ea9ec3d6579eadeab16060339cdeaf940. Kevin reported that this causes a crash during suspend on platforms that dont use PM...

DEBIAN-CVE-2024-46672

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpasupplicant 2.11 sends since 1efdba5fdc2c "Handle PMKSA flush in the driver for SAE/OWE offload cases" SSID based PMKSA del commands. brcmfmac is not prepared and tries...

AZL-49257 CVE-2024-46672 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpasupplicant 2.11 sends since 1efdba5fdc2c "Handle PMKSA flush in the driver for SAE/OWE offload cases" SSID based PMKSA del commands. brcmfmac is not prepared and tries...

bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

...

In Go before 1.15.13 and 1.16.x before 1.16.5 there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.

...

exfat: fix potential deadlock on __exfat_get_dentry_set

...

libbpf: Use OPTS_SET() macro in bpf_xdp_query()

...

kernel: efivarfs: force RO when remounting if SetVariable is not supported

A flaw was found in the Linux kernel, which involves the improper handling of the efivarfs filesystem when the firmware does not support the SetVariable function at runtime. Specifically, even if efivarfs is initially mounted as read-only RO, it can be remounted as read-write RW without checking ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an SSID-based PMKSA removal issue in the wifi:brcmfmac component. No details of the vulnerability are provid...

Huawei HarmonyOS and EMUI Access Privilege Verification Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to an access...

NewStart CGSL MAIN 6.02 : grub2 Multiple Vulnerabilities (NS-SA-2024-0068)

The remote NewStart CGSL host, running version MAIN 6.02, has grub2 packages installed that are affected by multiple vulnerabilities: - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read i...

Rapid7 Insight Platform 安全漏洞

Rapid7 Insight Platform is a platform for managing profiles, users, products, API keys, and settings from Rapid7 USA. A security vulnerability exists in Rapid7 Insight Platform that stems from the inclusion of an authorization missing issue that allows an attacker to intercept local requests to s...

PT-2024-39116 · Totolink · Totolink Ac1200 T8

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220 Description: A critical vulnerability has been found in the TOTOLINK AC1200 T8, affecting the setWiFiRepeaterCfg function of the file /cgi-bin/cstecgi.cgi. The manipulation of the password...

Interchain Security: The signers of ICS messages do not need to match the provider address

Context ICS has the following four messages that enable validators on the provider chain to perform different actions: - MsgOptIn -- adds a validator to the consumer chain’s active set - MsgOptOut -- removes a validator from the consumer chain’s active set - MsgAssignConsumerKey -- changes the...

python-django: Potential SQL injection in QuerySet.values() and values_list()

A flaw was found in Django. The QuerySet.values and QuerySet.valueslist methods on models with a JSONField were subject to SQL injection in column aliases via a crafted JSON object key as a passed arg...

SUSE CVE-2024-44950

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with special register set When enabling access to the special register set, Receiver time-out and RHR interrupts can happen. In this case, the IRQ handler will try to read from the FIFO...