Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: prefer nftchainvalidate nftchainvalidate already performs loop detection, as a cycle in the process could lead to a call stack overflow ctx-level = NFTJUMPSTACKSIZE. It also iterates through the maps via t...

CVE-2024-47374

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.0.2...

The vulnerability of the `qedf_update_link_speed()` function in the `drivers/scsi/qedf/qedf_main.c` component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qedfupdatelinkspeed function in the drivers/scsi/qedf/qedfmain.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-57577

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speeddir parameter in the formSetSpeedWan function...

Object Storage Use Cases in Focus: New Endpoints for Higher Capacity and Speed

...

PT-2025-36297

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0 12 Description A flaw exists in the Linux kernel related to the handling of High-Speed Resilient HSR frames. Receiving an HSR frame without sufficient space to accommodate the HSR tag within the skb socket...

PT-2025-3474 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the formSetClientState function when handling the limitSpeedUp parameter. This can be exploited by a remote attacker to cause a denial of service or...

How Opera for Android’s revamped ad blocker improves your browsing experience

News, Privacy How Opera for Android’s revamped ad blocker improves your browsing experience Share December 11th, 2024 Hi Opera users! At Opera, we know how intrusive advertising can disrupt your browsing experience by turning it into a frustrating maze of pop-ups. That’s why we have included a...

CVE-2024-53738

Server-Side Request Forgery SSRF vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through = 1.3.9.8...

CVE-2024-53738

CVE-2024-53738 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Asset CleanUp: Page Speed Booster, affected versions are up to 1.3.9.8. The CVE entry notes a MEDIUM severity with CVSSv3.1 base score 4.4 and that the vulnerability affects authenticated users (admin+). Connect...

CVE-2024-53738 WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through = 1.3.9.8...

CVE-2024-53738 WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.8...

WordPress plugin Asset CleanUp: Page Speed Booster 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-35846 · WordPress · Asset Cleanup: Page Speed Booster

Name of the Vulnerable Software and Affected Versions: Asset CleanUp: Page Speed Booster versions 1.3.9.8 and earlier Description: A Server-Side Request Forgery SSRF issue affects the Asset CleanUp: Page Speed Booster plugin, allowing an attacker to perform Server Side Request Forgery. This could...

WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Zaidan Rizaki Patchstack Alliance in WordPress Plugin Asset CleanUp: Page Speed Booster versions = 1.3.9.8...

kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

A vulnerability was found in the Linux kernel's hwmon subsystem, specifically in the mlxreg-fan driver. The issue arises when the driver’s sysfs interface for controlling fan speed does not properly handle cases where the requested minimum fan speed exceeds the maximum allowable value. When the...

UBUNTU-CVE-2024-50274

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...

SUSE-SU-2024:4006-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: cobbler: - Security issues fixed: CVE-2024-47533: Prevent privilege escalation from none to admin bsc1231332 - Other bugs fixed: Increase start timeout for cobblerd unit bsc1219450 Provide syncsinglesystem for DHCP modules to improve performance bsc1219450...

kernel: mmc: omap_hsmmc: fix return value check of mmc_add_host()

A flaw was found in the OMAP HSMMC driver in the Linux kernel. The driver does not check the return value of mmcaddhost, which can lead to a memory leak from mmcallochost and a null pointer dereference crash in mmcremovehost when attempting to remove a device that was never successfully added...

kernel: usb: gadget: core: Check for unset descriptor

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for...