kernel: wifi: mac80211: fix queue selection for mesh/OCB interfaces

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and...

kernel: ipv6: fix WARNING in ip6_route_net_exit_late()

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix WARNING in ip6routenetexitlate During the initialization of ip6routenetinitlate, if file ipv6route or rt6stats fails to be created, the initialization is successful by default. Therefore, the ipv6route or rt6stats file...

PT-2025-26077 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.5-00039-g2fd9ae1b568c Description: A vulnerability in the Linux kernel has been resolved, which was causing a random warning message when the driver loads. The warning log indicates an unexpected gfp value,...

PT-2025-18620 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A warning in the ip6 route net exit late function has been fixed. During the initialization of ip6 route net init late, if the ipv6 route or rt6 stats file fails to be created, the...

PT-2025-26074 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential NULL pointer dereference issue has been identified in the Linux kernel, specifically in the kernfs remove function. This issue arises when lockdep is enabled, causing lockd...

PT-2025-26026 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs when a task is descheduling and is requeued on a CPU that is excluded from the cpus mask. This can trigger a...

CVE-2023-22780

creationtimestamp| type| source ---|---|--- 2023-05-08 18:37:44+00:00| seen| https://t.me/cibsecurity/63433 2023-05-10 13:22:06+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-arubaos-und-aruba-instantos-updates-verfugbar...

Citrix HDXJsInjectr is incompatible with Internet Explorer's Enhanced Security Features

When users opened launched IE11 brower, an warning message may occur as below: Citrix HDXJsInjectr from Citrix Systems,inc is incompatible with Internet Explorer's Enhanced Security Features...

ManageEngine AssetExplorer < 6.9 Build 6989 XXE

An XML external entity XXE vulnerability exists in ManageEngine AssetExplorer 6.9 Build 6980 through Build 6988. A threat actor with the SDAdmin role can configure a malicious server to return a response with a malformed XML using the Reports integration API, causing an XML External Entity XXE...

PT-2023-11231 · Undefined · Undefined

Хакеры эксплуатируют уязвимость пятилетней давности, взламывая видеокамеры в банках Исследователи Fortinet FortiGuard Labs предупреждают, что злоумышленники активно эксплуатируют критическую неисправленную уязвимость, влияющую на устройства цифровой видеозаписи DVR TBK. Недостаток, отслеживаемый...

Microsoft Edge (Chromium) < 112.0.1722.48

The version of Microsoft Edge installed on the remote Windows host is prior to 112.0.1722.48. It is, therefore, affected by a vulnerability as referenced in the April 15, 2023 advisory. - Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploi...

Avoid this "lost injured dog" Facebook hoax

Facebook users are advised to be wary of posts involving injured dogs receiving treatment at a vet surgery, or pets sitting next to people post-operation adorned with bandages and plaster casts. The dog-themed missives all follow a similar format, with the primary change between them being the...

A week in security (April 10 - 16)

Last week on Malwarebytes Labs: How the cops buy a "God view" of your location data, with Bennett Cyphers: Lock and Code S04E09 Apple releases emergency updates for two known-to-be-exploited vulnerabilities Don't plug your phone into a free charging station, warns FBI KFC, Pizza Hut owner employe...

CVE-2022-28353

In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL aka external.php?url= is vulnerable to XSS...

MyBB External Redirect Warning Plugin 跨站脚本漏洞

MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is easy to use, supports multi-language, scalable and so on. A security vulnerability exists in MyBB External Redirect Warning Plugin version 1.3, which originates from the presenc...

CVE-2022-28353

The CVE-2022-28353 entry concerns the MyBB External Redirect Warning Plugin (version 1.3). The vulnerability is an XSS in the redirect URL parameter external.php?url=, allowing injected scripts when users follow the redirect. The affected component is the redirect handling code for external.php, ...

PT-2023-12939 · Mybb · External Redirect Warning Plugin

Name of the Vulnerable Software and Affected Versions: External Redirect Warning Plugin version 1.3 for MyBB Description: The issue concerns a problem where the redirect URL, also known as external.php?url=, is susceptible to XSS. This means an attacker could potentially inject malicious scripts...

Why is ‘Juice Jacking’ Suddenly Back in the News?

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation FBI and the Federal Communications Commission FCC about "juice jacking," a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile...

Sextortion "assistance" scammers con victims further

The FBI is warning of a particular aspect of sextortion scams: Supposed organisations that offer "help" to remove stolen images, often at a significant financial cost and no guarantee of success. Sextortion, the act of blackmailing individuals for cash in return for not leaking sensitive imagery...

FBI Advising People to Avoid Public Charging Stations

The FBI is warning people against using public phone-charging stations, worrying that the combination power-data port can be used to inject malware onto the devices: Avoid using free charging stations in airports, hotels, or shopping centers. Bad actors have figured out ways to use public USB por...