Custom redemption might revert if old assets were unregistered

Lines of code Vulnerability details quoteCustomRedemption works under the assumption that the maximum size of the erc20sAll should be assetRegistry.size, however there can be cases where an asset was unregistered but still exists in an old basket, making the size of the old basket greater than...

VSFTPD 2.3.2 and Earlier STAT Denial of Service

This module triggers a Denial of Service condition in the VSFTPD server in versions before 2.3.3 tested on 2.3.0, 2.3.1, and 2.3.2. Version 2.3.3 and higher should not be vulnerable. Module Options msf use auxiliary/dos/ftp/vsftpd232 msf auxiliaryvsftpd232 show actions ...actions... msf...

Virtuozzo PowerPanel Update 2 Hotfix 1 (7.0.4-77)

The update for Virtuozzo PowerPanel introduces stability fixes. Vulnerability id: PP-746 Controller installation may fail with a credentials-related error...

Updated suricata packages fix security vulnerability

Various security, performance, accuracy and stability issues. See referenced package announcements for details...

MGASA-2023-0174 Updated suricata packages fix security vulnerability

Various security, performance, accuracy and stability issues. See referenced package announcements for details...

PT-2023-36343 · Mageia · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves various security, performance, accuracy, and stability problems. For detailed information, refer to the announcements of the referenced packages. Recommendations: At...

kernel: staging: fbtft: core: set smem_len before fb_deferred_io_init call

A flaw was found in the fbtft module in the Linux kernel. An incorrect order of operations can cause an improper initialization of framebuffer devices, potentially impacting system stability and resulting in a denial of service...

unstake() function: The unstake function permits the unstaking of multiple position NFTs from the same liquidity pool (LP) by the same lender. This opens the possibility for a lender to claim more Ajna token rewards than they are entitled to by staking and unstaking multiple NFTs associated with the same LP.

Lines of code Vulnerability details Impact The absence of a mechanism to prevent a lender from unstaking multiple NFTs for the same liquidity pool LP could potentially lead to the exploitation of the Ajna token reward system. A lender can mint, stake, and unstake multiple NFTs for the same LP fro...

Virtuozzo Hybrid Infrastructure 5.4 Update 2 (5.4.2-58)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute services, core and object storage, integrations, monitoring and alerts. Additionally, this release delivers stability improvements and addresses issues found in previous releases. Vulnerabilit...

PT-2025-25961 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.20.0 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the drm/amdgpu component. This issue arises when amdgpu cs vm handling returns a non-zero value, causing the bo...

CVE-2023-24540

A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be...

Adobe ColdFusion Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Adobe ColdFusion Unauthenticated Remote Code Execution', 'Description' = %q This module exploits a remote unauthenticated deserialization of...

CVE-2023-30624

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled...

Virtuozzo Hybrid Infrastructure 5.4 Update 1 Hotfix 3 (5.4.1-64)

This update provides a stability improvement for the update procedure. Vulnerability id: VSTOR-68152 Improved stability of the update procedure...

April 25, 2023—KB5025298 (OS Build 22000.1880) Preview

None None...

Virtuozzo Hybrid Infrastructure 5.4 Update 1 Hotfix 2 (5.4.1-63)

This update provides a stability improvement for the core storage service. Vulnerability id: VSTOR-65751 Improved stability of the core storage during an update by adding metadata versioning checks...

Fedora 36 : suricata (2023-8febb13d07)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8febb13d07 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 37 : suricata (2023-c91ab14186)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c91ab14186 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

SPIP form PHP Injection

This module exploits a PHP code injection in SPIP. The vulnerability exists in the oubli parameter and allows an unauthenticated user to execute arbitrary commands with web user privileges. Branches 3.2, 4.0, 4.1 and 4.2 are concerned. Vulnerable versions are use exploit/unix/webapp/spiprceform m...

SPIP Remote Command Execution Exploit

This Metasploit module exploits a PHP code injection in SPIP. The vulnerability exists in the oubli parameter and allows an unauthenticated user to execute arbitrary commands with web user privileges. Branches 3.2, 4.0, 4.1 and 4.2 are concerned. Vulnerable versions are below 3.2.18, below 4.0.10...