Malware in beautiful-text

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in beautiful-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 541c205f7945260cfd985f94123456491c7f1875b852425930bc9afc540f68f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8859 Malicious code in beautiful-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 541c205f7945260cfd985f94123456491c7f1875b852425930bc9afc540f68f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VICIdial SQL injection vulnerability

VICIdial is a software suite from VICIdial, Inc. designed to interact with the Asterisk open source Pbx telephony system as a complete inbound/outbound contact center suite with inbound email support. A security vulnerability exists in VICIdial that stems from allowing plain text credentials to b...

Texas Instruments Fusion Digital Power Designer security vulnerability

Texas Instruments Fusion Digital Power Designer is a digital power design tool from Texas Instruments. A security vulnerability exists in Texas Instruments Fusion Digital Power Designer version 7.10.1, which originated from a vulnerability that allows a local attacker to gain access to sensitive...

D-Link DIR-823G security vulnerabilities

D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B0520181207 version, which stems from an information disclosure vulnerability that allows unauthorized configuration file downloads, where the downloaded configuration fi...

Google Golang security vulnerabilities

Google Golang is a static strongly typed, compiled language from Google.Go's syntax is close to that of C, but differs with respect to variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages that...

SUSE CVE-2024-44965

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pticlonepgtable alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then DF from the stack guard. It turned out that...

CVE-2024-45175

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It was found out that sensitive information, for example login credentials of cameras, is stored in cleartext. Thus, an attacker with filesystem access, for example exploiting a...

CVE-2024-45004

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read export will simply convert this field to hex and send it to...

DEBIAN-CVE-2024-44965

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pticlonepgtable alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then DF from the stack guard. It turned out that...

UBUNTU-CVE-2024-44965

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pticlonepgtable alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then DF from the stack guard. It turned out that...

CVE-2024-44965 x86/mm: Fix pti_clone_pgtable() alignment assumption

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pticlonepgtable alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then DF from the stack guard. It turned out that...

CVE-2024-44965

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pticlonepgtable alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then DF from the stack guard. It turned out that...

How to avoid election related scams

With the US election campaigns at full throttle, scammers have taken a renewed interest in the ways this can be used to defraud people, often using the same tactics legitimate campaigns leverage for support emails, text messages, phone calls, and social media pleas. The lure that we have seen the...

CVE-2024-45306

A heap-buffer overflow was found in Vim. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. It was assumed that this loop was...

gitea -- multiple issues

Problem Description: Replace v-html with v-text in search inputbox Fix nuget/conan/container packages upload bugs...

forgejo -- multiple vulnerabilities

Problem Description: Replace v-html with v-text in search inputbox Upgrade webpack to v5.94.0 as a precaution to mitigate CVE-2024-43788, although we were not yet able to confirm that this can be exploited in Forgejo...

CVE-2024-45306 heap-buffer-overflow in Vim

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

CVE-2024-45306

Vim CVE-2024-45306 affects Vim’s cursor-position handling where a prior patch could allow the cursor to point beyond a line, risking a heap-buffer-overflow and crashes. Public details in connected advisories describe the root cause as a loop removal affecting boundary checks, with the observed im...