Aggregator

This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.7.1. Affected by this vulnerability is the function opal_event_init of the component powernv. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2023-52686. The attack requires being on the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.7.1. It has been declared as problematic. This affects the function lpit_update_residency of the component ACPI. Such manipulation leads to integer overflow. This vulnerability is listed as CVE-2023-52683. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.7.1. It has been rated as critical. This impacts an unknown function of the component qseecom. Performing a manipulation results in memory leak. This vulnerability is cataloged as CVE-2023-52684. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.1.74/6.6.13/6.7.1 and classified as critical. This vulnerability affects the function f2fs_wait_on_block_writeback. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-52682. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.7.1 and classified as problematic. Impacted is the function of_parse_phandle_with_args_map. The manipulation leads to double free. This vulnerability is referenced as CVE-2023-52679. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.15.147/6.1.74/6.6.13/6.7.1 and classified as problematic. The affected element is the function _ctl_get of the component ALSA. The manipulation results in unchecked return value. This vulnerability is identified as CVE-2023-52680. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.74/6.6.13/6.7.1. It has been classified as problematic. The impacted element is the function s_fs_info of the component efivarfs. This manipulation causes allocation of resources. This vulnerability is tracked as CVE-2023-52681. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability identified as problematic has been detected in Linux Kernel up to 5.15.147/6.1.74/6.6.13/6.7.1. Impacted is the function vmalloc_to_page of the component riscv. This manipulation causes memory leak. This vulnerability appears as CVE-2023-52677. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.74/6.6.13/6.7.1. This issue affects the function kfd_create_indirect_link_prop of the component amdkfd. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2023-52678. The attack needs to be done within the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.13/6.7.1. It has been classified as critical. This issue affects some unknown processing of the component bpf. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2023-52676. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

在去年 12 月学校发生枪击案之后，布朗大学经济学教授 Roberto Serrano 首次让学生在家中完成期中考试。期中考试成绩显示大部分学生获得了满分或接近满分，他怀疑学生大规模使用 AI 作弊。因此决定将期末考试改为线下进行。他没有立即宣布期中考试无效，而是决定先看看期末考试的得分。如果期末考试得分的分布与期中考试的分布基本相同，那么他会将期中考试得分计入成绩。结果是 18 名学生退课，9 名学生没有参加期末考试。3 名学生得了零分，期末考试的平均分只有 48.6%——这是他所教班级迄今的历史最低分。此前期末考试的平均分从未低于 65%。只有少数学生的期末考试成绩与期中考试的成绩相近。

A novel supply chain attack called “Ghostcommit” that conceals prompt-injection instructions within PNG images to bypass AI code reviewers and trick coding agents into leaking secrets such as .env files. The ASSET Research Group demonstrated that a pull request containing an explicit, plain-text instruction to exfiltrate a repository’s .env file is caught immediately by LLM-based […]

The post New Ghostcommit Attack Hides Malicious Prompts in Images to Exploit AI Agents appeared first on Cyber Security News.

苹果起诉 OpenAI，指控该公司窃取其商业机密。这起诉讼的两位核心人物是 OpenAI 首席硬件官 Tang Tan 以及前苹果工程师 Chang Liu。苹果指控称，Tang Tan 会指导跳槽到 OpenAI 的苹果前员工如何规避苹果针对离职员工的安全流程。而 Chang Liu 被控秘密访问并下载了数十份苹果的机密硬件相关文件，其中包括大量关于未发布产品的详细信息、工程演示文稿、技术规格和私有项目数据。Liu 被控没有归还苹果配发的笔记本电脑，他还访问和使用了前同事的笔记本电脑，利用认证漏洞访问了苹果的共享网络文件夹。在发现漏洞之后，Liu 在前同事的笔记本电脑上留言说“LOL”。

A vulnerability classified as problematic was found in ZKTeco BioTime up to 8.5.4. The impacted element is an unknown function of the component Authorization Component. Executing a manipulation can lead to information disclosure. This vulnerability is tracked as CVE-2023-51141. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in ZKTeco BioTime up to 8.5.4. This affects an unknown function. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2023-51142. The attack may be initiated remotely. There is no available exploit.

A vulnerability categorized as critical has been discovered in Apfloat 1.10.1. This affects the function org.apfloat.internal.DoubleModMath::modPow. Such manipulation leads to stack-based buffer overflow. This vulnerability is listed as CVE-2024-23086. The attack must be carried out from within the local network. There is no available exploit.

A vulnerability labeled as problematic has been found in Apfloat 1.10.1. This issue affects the function org.apfloat.internal.DoubleScramble::scramble. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2024-23085. The attack requires access to the local network. No exploit is available.

A vulnerability marked as problematic has been reported in JFreeChart 1.5.4. Impacted is an unknown function of the file /chart/annotations/CategoryLineAnnotation. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2024-22949. The attack requires being on the local network. There is not any exploit available.