Category: Advisories

Posted by J. Hellenthal via Fulldisclosure on Aug 27 Correct me if I'm wrong but I believe he is trying to relay that "on the...

It was discovered that Drupal incorrectly sanitized uploaded filenames. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2020-13671) It was discovered...

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged...

Multiple security issues were discovered in Python, a high-level, interactive, object-oriented language: CVE-2024-0397 A race condition in the ssl module was found when accessing CA...

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged...

FEDORA-2024-926631fe97 Packages in this update: mingw-python3-3.11.9-1.fc40 Update description: Update to python-3.11.9. Backport fix for CVE-2024-6923. Read More

FEDORA-2024-f3851065c0 Packages in this update: mingw-python3-3.11.9-1.fc39 Update description: Update to python-3.11.9. Backport fix for CVE-2024-6923. Read More

Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or request smuggling. https://security-tracker.debian.org/tracker/DSA-5758-1...

FEDORA-2024-a455bea9ca Packages in this update: calibre-7.17.0-3.fc40 Update description: Fix fonts for < f41 releases. Upgrade to latest upstream release to fix 4 CVE's and enable...

Posted by Jeffrey Walton on Aug 24 There's no difference between sending the password or Hash(password) at the client. It is similar to (but weaker...