Spring cleaning tips for your browser

When you are resting up from the physical part of your spring cleaning and youre sitting behind your laptop or swiping left on your phone, why dont you speed up your browsing experience with a few simple actions? Lets start with your browser, as that usually has the most impact on your perception...

sync-sign.com Cross Site Scripting vulnerability OBB-3262624

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-37904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid10 subsystem related to a leak of r10bio-remaining during recovery operations. Specifically, the raid10 sync request function adds...

openSUSE 15 Security Update : nextcloud-desktop (openSUSE-SU-2023:0090-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0090-1 advisory. - Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client...

io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) potentially affected by CVE-2023-30513 +2 more via org.csanchez.jenkins.plugins:kubernetes (0.10)

org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.1.18, =1.0.42 Source cves:...

com.openshift.jenkins:openshift-pipeline (>=1.0.22, <=1.0.57), io.fabric8.jenkins.plugins:openshift-sync (>=0.0.8, <=0.0.14) potentially affected by CVE-2023-30513 +2 more via org.csanchez.jenkins.plugins:kubernetes (0.6)

org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.22, =0.0.8, =0.0.14 Source cves:...

io.fabric8.jenkins.plugins:openshift-sync (>=1.0.43, <=1.0.45) potentially affected by CVE-2023-30513 +2 more via org.csanchez.jenkins.plugins:kubernetes (1.18.2)

org.csanchez.jenkins.plugins:kubernetes MAVEN version 1.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =1.0.43, =1.0.45 Source cves:...

In the Linux kernel through 6.2.8 net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element but do not.

...

Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)

Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)

Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)

Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)

Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Code injection

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

SUSE CVE-2023-28866

In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...

AZL-25933 CVE-2023-28866 affecting package kernel for versions less than 5.15.122.1-2

In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...

UBUNTU-CVE-2023-28866

In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...

Linux Kernel Buffer Overflow Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.2.8 and earlier, which stems from net/bluetooth/hcisync.c allowing out-of-bounds access...

CVE-2023-20956

In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L...