PT-2024-7683 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc4 Description: The vulnerability is caused by the incorrect spelling of a function name in the RTAS function table, leading to failed reverse lookups and warnings. The PAPR spec spells the function name ...

The vulnerability of the NSSpellChecker spelling checking interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the NSSpellChecker spelling checker interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Metasploit Weekly Wrap-Up 01/12/24

New module content 1 Windows Gather Mikrotik Winbox "Keep Password" Credentials Extractor Author: Pasquale 'sid' Fiorillo Type: Post Pull request: 18604 contributed by siddolo Path: windows/gather/credentials/winboxsettings Description: This pull request introduces a new post module to extract th...

The vulnerability of the spelling-check service in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the spelling-check service in Google Chrome and Microsoft Edge browsers is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

October 10, 2023—KB5031364 (OS Build 20348.2031)

None None...

October 10, 2023—KB5031362 (OS Build 14393.6351) - EXPIRED

None None...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...

September 26, 2023—KB5030301 (OS Build 22000.2482) Preview

None None...

The vulnerability of the spelling-check service in Zoom software, which is used for video conferencing, allows a violator to gain unauthorized access to protected information.

The vulnerability of the spelling-check service in Zoom software for video conferencing involves insufficient protection of operational data when text is transmitted online instead of being processed locally. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access ...

ShipStation 安全漏洞

ShipStation is an e-commerce retail order carrier processing and shipping software from ShipStation. A security vulnerability exists in ShipStation version 1.0, which stems from a spelling error that can lead to a blank password and a successful NULL comparison, which can be exploited by an...

SUSE CVE-2017-16664

Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System OTRS 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation...

The vulnerability of the Check Spelling web service on GitHub, related to the disclosure of information via the GITHUB_TOKEN token, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Check Spelling web service from GitHub relates to the exposure of information through the GITHUBToken token. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information. source-iocs-preserved...

[SECURITY] Fedora 36 Update: golang-github-client9-gospell-0-0.12.20190524git90dfc71.fc36

Pure golang spelling based on Hunspell dictionaries...

GHSA-G86G-CHM8-7R2P check-spelling workflow vulnerable to token leakage via symlink attack

Impact For a repository with the check-spelling action enabled that triggers on pullrequesttarget or schedule, an attacker can send a crafted Pull Request that causes a GITHUBTOKEN to be exposed. With the GITHUBTOKEN, it's possible to push commits to the repository bypassing standard approval...

Moodle Authenticated Spelling Binary Remote Code Execution

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor...

ALSA-2022:2120 Moderate: zsh security update

The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the Korn shell, but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell...

Yubico ykneo-openpgp data forgery issue vulnerability

Yubico ykneo-openpgp is an open source security product from the Swedish company Yubico. It implements the OpenPGP card functionality used on YubiKey NEO devices sold by Yubico. A data forgery issue vulnerability exists in versions prior to Yubico ykneo-openpgp 1.0.10. The vulnerability stems fro...

The vulnerability of Google Chrome’s spelling checker function allows a hacker to circumvent existing restrictions.

The vulnerability of Google Chrome’s spelling checker function is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using a specially created HTML page...

spellingcity.com Open Redirect vulnerability OBB-2291647

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moodle Authenticated Spelling Binary Remote Code Execution Exploit

Moodle allows an authenticated user to define spellcheck settings via the web interface. The user can update the spellcheck mechanism to point to a system-installed aspell binary. By updating the path for the spellchecker to an arbitrary command, an attacker can run arbitrary commands in the...