14076 matches found
UBUNTU-CVE-2024-53181
In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...
2024 in AI: It’s changed the world, but it’s not all good
A popular saying is: “To err is human, but to really foul things up you need a computer.” Even though the saying is older than you might think, it did not come about earlier than the concept of artificial intelligence AI. And as long as we have been waiting for AI technology to become commonplace...
CVE-2024-53184 um: ubd: Do not use drvdata in release
In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the ubd instance. Otherwise, removing a ubd device will result in a crash: RIP: 0033:blkmqfreetagset+0x1f/0xba RSP:...
Exploit for CVE-2024-9933
CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option...
DEBIAN-CVE-2024-56521
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPTSSLVERIFYHOST and CURLOPTSSLVERIFYPEER are set unsafely...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of drvdata in the vectordevicerelease function in the um module...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of drvdata when releasing the ubd device in the um module, causing the kernel to crash...
UBUNTU-CVE-2024-56201
Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability...
RUSTSEC-2024-0431 Unsound usages of `core::slice::from_raw_parts`
We consider asslice and asslicemut unsound because: the pointer with any bit patterns could be cast to the slice of arbitrary types. The pointer could be created by unsafe new and deprecated fromparts. We consider that fromparts should be removed in latest version because it will help trigger...
SUSE-SU-2024:4409-1 Recommended update for vim
This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim bsc1231373 - CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 Other fixes: - Remove patch that introduced a bug caused significantly more CPU usage bsc1220618 - Updated to...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
Manual use is cumbersome; create an example script instead. Us...
Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck
CVE-2023-50564 CVE-2023-50564 is an RCE vulnerability in Pluc...
Exploit for Code Injection in Craftcms Craft_Cms
Before you run script again do fuser -k 6666/tcp...
Exploit for CVE-2024-27292
Docassemblepoc Docassemble任意文件读取漏洞CVE-2024-27292 python D...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
Check-Pointpoc Check-Point安全网关任意文件读取漏洞CVE-2024-24919 pytho...
Exploit for Path Traversal in Ghost
CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email...
Exploit for Path Traversal in Bazarr
Bazaarpoc Bazaar v1.4.3 任意文件读取漏洞CVE-2024-40348 python Baza...
Exploit for Command Injection in Totolink A6000R_Firmware
TOTOLINKpoc TOTOLINK A6000R 命令执行漏洞（CVE-2024-41319） pytho...
