CVE-2024-33895: Use of Hard-coded Credentials

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device...

DEBIAN-CVE-2024-41053

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix ufshcdabortone racing issue When ufshcdabortone is racing with the completion ISR, the completed tag of the request's mqhctx pointer will be set to NULL by ISR. Return success when request is completed by ISR...

It's best to just assume you’ve been involved in a data breach somehow

Between AT&T, all the follow-on activity from Snowflake, Microsoft Outlook, and more, its best to probably just assume at this point that your personal information has somehow been involved in a data breach. Were only halfway through 2024, and weve already seen some of the largest data breaches a...

CGA-XW26-V9GP-6F8M

Bulletin has no description...

CGA-QW34-F3HC-GG4H

Bulletin has no description...

CGA-QH7X-GWRF-HFQM

Bulletin has no description...

CGA-Q3CV-CGP7-8PC3

Bulletin has no description...

CGA-C8FQ-WH67-PF6C

Bulletin has no description...

CGA-4G2J-MW64-7VQW

Bulletin has no description...

PT-2024-40300 · Surrealdb · Surrealdb

Name of the Vulnerable Software and Affected Versions: SurrealDB versions prior to 1.5.4 SurrealDB versions prior to 2.0.0-alpha.6 Description: The issue arises when an authenticated scope user switches working databases in a session using the use method or USE clause. If a user record with an...

BIT-HUBBLE-UI-BACKEND-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

BIT-CILIUM-PROXY-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

InnoLoader Malware Stealth Mastery, Unique Instances per Download

...

PT-2024-29232

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The issue arises when ufshcd abort one is racing with the completion ISR, causing the completed tag of the request's mq hctx pointer to be set to NULL by ISR. This results in a kernel NULL...

Hfinger - Fingerprinting HTTP Requests

Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :- Its main objective is to provide unique representations fingerprints of malware requests, which help in their identification. Unique means here that each fingerprint should be seen...

CGA-H628-MQFX-3884

Bulletin has no description...

GHSA-R82W-3PHG-QVR4 Moodle uses the same key for QR login and auto-login

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...

Moodle uses the same key for QR login and auto-login

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...

CVE-2024-38277

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two...

CVE-2024-38277

The Moodle virtual learning environment is affected by a vulnerability where a unique key should be generated separately for a user's QR login key and their auto-login key . The root cause is that the same key can currently be used interchangeably between these two functions. Exploiting this flaw...