USN-7381-1: Linux kernel (Low Latency) vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

CVE-2011-2411 vulnerabilities

Vulnerabilities for packages: samba...

GHSA-X6H9-CX79-JJJV vulnerabilities

Vulnerabilities for packages: unixodbc...

ROS-20250326-08

A vulnerability in the snmptrapd daemon of the Zabbix universal monitoring system is related to improper processing of the output data for logs. Exploitation of the vulnerability could allow an attacker, acting remotely, to spoof the user interface Vulnerability of strbase64encoderfc2047 function...

Security Bulletin: Multiple Vulnerabilities in glibc affect Cloud Pak System [CVE-2024-33600, CVE-2024-33601]

Summary Vulnerabilities in glibc affect Cloud Pak System. Vulnerability Details CVEID:CVE-2024-33600 DESCRIPTION: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, the client request can result...

GHSA-255R-3PRX-MF99 vulnerabilities

Vulnerabilities for packages: zellij...

GHSA-92M3-M5PW-P2X9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4W4V-5HC9-XRR2 vulnerabilities

Vulnerabilities for packages: solr...

RHSA-2025:2521 Red Hat Security Advisory: grub2 security update

Bulletin has no description...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7331-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7331-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

Ubuntu: Security Advisory (USN-7310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-F666-246M-P7MG vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-F73R-7G7H-494M vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7288-2)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7288-2 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

CVE-2023-51338

CVE-2023-51338 affects PHPJabbers Meeting Room Booking System v1.0. The vulnerability is a Multiple Stored Cross-Site Scripting (XSS) in the index.php page, specifically in the title and name parameters. The root cause, per the packetstorm exploit details, is storing malicious scripts entered int...

ICS testing best results. Hint: Blend your approach

TL;DR Onsite ICS testing is risk averse Laboratory ICS device testing uncovers more A blended approach is key How that works Demonstrable benefits Introduction For safety’s sake onsite ICS testing adopts a risk averse approach, even if scheduled during downtime or a maintenance period. It’s vital...

Denial Of Service (DoS)

@sentry/astro, @sentry/aws-serverless, @sentry/bun, @sentry/google-cloud-serverless, @sentry/nestjs, @sentry/nextjs, @sentry/node, @sentry/nuxt, @sentry/remix, @sentry/solidstart and @sentry/sveltekit are vulnerable to Denial of Service DoS. The vulnerability is due to resource exhaustion due to...

MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title MySchool System - Multiple Vulnerabilities .:. Google Dorks .:. inurl:web/teacherapp .:. Date:Jan 20, 2025 .:. Exploit Author: bRpsd .:. Contact: cyatlive.no .:. Vendor - https://myschool-system.com/ .:. Vendor...

GHSA-2VPQ-FH52-J3WV vulnerabilities

Vulnerabilities for packages: datadog-agent, airflow...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry, timoni, multus-cni, opensearch-k8s-operator, kube-rbac-proxy, terraform, bank-vaults, trust-manager, hey, checksec, ctop, node-problem-detector, metallb, kube-metrics-adapter, kubernetes-csi-driver-hostpath, newrelic-fluent-bit-output,...