1299 matches found
UBUNTU-CVE-2024-35872
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...
PT-2024-15316
Name of the Vulnerable Software and Affected Versions TBD affected versions not specified Description The issue is related to a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to a local bypass of DRM content protection with no additional execution...
What can we learn from the passwords used in brute-force attacks?
Brute force attacks are one of the most elementary cyber threats out there. Technically, anyone with a keyboard and some free time could launch one of them -- just try a bunch of different username and password combinations on the website of your choice until you get blocked. Nick Biasini and I...
kernel: kernel: Denial of Service via memory leak in LRU hash maps
A flaw was found in the Linux kernel. A local user could exploit a memory leak vulnerability in the Least Recently Used LRU and LRUPERCPU hash maps. This occurs when the kernel allocates a new element during a map update but fails to release it if the hash table bucket cannot be locked. Repeated...
kernel: drm/ttm: fix bulk_move corruption when adding a entry
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix bulkmove corruption when adding a entry When the resource is the first in the bulkmove range, adding it again thus moving it to the tail will corrupt the list since the first pointer is not moved. This eventually lea...
Exploit for CVE-2024-27983
This repository builds up a vulnerable HTTP2 Node.js server se...
DEBIAN-CVE-2024-26814
In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler without trigger The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL and may become NULL if the user sets the trigger eventfd to -1. The interrupt handler itself...
BIT-MARIADB-2021-46665
MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations...
PT-2024-11064 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, specifically related to the ext4 file system. The fix addresses a check to prevent false positive reports of incorrect used inodes...
Mozilla: Alert dialog could have been spoofed on another site
The Mozilla Foundation Security Advisory describes this flaw as: Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website with the victim website's URL shown...
Open redirect
Rejected reason: This is unused...
Open redirect
Rejected reason: This is unused...
Open redirect
Rejected reason: This is unused...
platinumusedcars.com Cross Site Scripting vulnerability OBB-3853311
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Open redirect
Rejected reason: This is unused...
Open redirect
Rejected reason: This is unused...
CVE-2023-22502
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2024-0276 Kashipara Food Management System rawstock_used_damaged_smt.php sql injection
A vulnerability classified as critical has been found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file rawstockuseddamagedsmt.php. The manipulation of the argument productname leads to sql injection. It is possible to initiate the attack remotely. The exploi...
