Tenda HG6 3.3.0 Remote Command Injection

Tenda HG6 v3.3.0 Remote Command Injection Vulnerability Vendor: Tenda Technology Co.,Ltd. Product web page: https://www.tendacn.com https://www.tendacn.com/product/HG6.html Affected version: Firmware version: 3.3.0-210926 Software version: v1.1.0 Hardware Version: v1.0 Check Version:...

Security Bulletin: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.

Summary We are impacted as we ship WAS in docker image. As per security bulletin: https://www.ibm.com/support/pages/security-bulletin-information-disclosure-vulnerability-websphere-application-server-cve-2019-4441. For V9.0.0.0 through 9.0.5.1: · Upgrade to minimal fix pack levels as required by...

PT-2025-8256

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.1-rt17+ Description A issue in the Linux kernel has been identified where a sleeping function is called from an invalid context on RT kernel. This occurs when setting specific boot parameters, including "tra...

WordPress WPCargo Track & Trace plugin <= 6.9.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Raul in WordPress WPCargo Track & Trace plugin versions = 6.9.4. Solution Update the WordPress WPCargo Track & Trace plugin to the latest available version at least 6.9.5...

WordPress WPCargo Track & Trace plugin <= 6.9.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Raul in WordPress WPCargo Track & Trace plugin versions = 6.9.4. Solution Update the WordPress WPCargo Track & Trace plugin to the latest available version at least 6.9.5...

PT-2022-29260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to the SUNRPC svc deferred event trace class. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17....

PT-2022-30235

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to the SUNRPC svc deferred event trace class. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29938

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to the SUNRPC svc deferred event trace class. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-36939

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 2 crash type. The crash state involves gc trace, gs gc reclaim, and ireclaim. No information is provided...

Steer clear of this “TestNTrace” SMS spam

Yesterday I received an SMS from “TestNTrace”, with the message resembling an official NHS communication: The text reads as follows: NHS: You’ve been in close contact with a person who has contracted the Omicron variant. Please order a test kit via: URL redacted Well, that’s an alarming thing to...

The vulnerability of the ARP protocol implementation in the TCP/IP stack allows a attacker to gain unauthorized access to protected information.

The vulnerability of the ARP protocol, which is used to determine the MAC address of a computer, within the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2022-22514

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If inval...

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol allows a perpetrator to cause a service failure.

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the implementation of the ICMPv4 protocol of the Trace TCP/IP stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ICMPv4 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2022-22514

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If inval...

PT-2025-8027

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc7 Description A vulnerability in the Linux kernel has been resolved. The issue was related to the initialization of device objects in the vmbus device register function. The device's dma mask and dma parms...

PT-2025-8074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when waking up a suspended virtual machine VM, causing the kernel to print a trace for virtio drivers that do not...

PT-2022-29051

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to a use after free error in the struct blk trace of the blktrace subsystem. This problem was introduced in version v5.12 and is fixed in version v5.15.27. The actual...

CVE-2021-33150

Hardware allows activation of test or debug logic at runtime for some IntelR Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-25003

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...