Month: September 2023

It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate MFT flags in certain situations. An attacker could...

Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause...

FEDORA-EPEL-2023-d9153eda95 Packages in this update: salt-3005.2-1.el9 Update description: Fixes for CVE-2023-20897 and CVE-2023-20898 Read More

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Google Chrome is a web browser...

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate...

FEDORA-2023-ac1aa963e4 Packages in this update: salt-3005.2-1.fc37 Update description: Fixes for CVE-2023-20897 and CVE-2023-20898 Read More

Posted by Georgi Guninski on Sep 05 This is barely a DoS, but since Chrome has explicit protection against it, we decided to disclose it....

Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long string in the wifiPwd_5G...

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host. Read More

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass. Read More