Aggregator

CVE-2024-57928 | Linux Kernel up to 6.12.9/6.13-rc6 netfs_read_to_pagecache buffer overflow (WID-SEC-2025-0119)

Vuldb Updates
9 months ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.9/6.13-rc6. This impacts the function netfs_read_to_pagecache. Performing manipulation results in buffer overflow. This vulnerability is reported as CVE-2024-57928. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2024-57921 | Linux Kernel up to 6.12.9/6.13-rc6 AMD GPU race condition (Nessus ID 233479 / WID-SEC-2025-0119)

Vuldb Updates
9 months ago
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.9/6.13-rc6. This vulnerability affects unknown code of the component AMD GPU. Performing manipulation results in race condition. This vulnerability is identified as CVE-2024-57921. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-21654 | Linux Kernel up to 6.6.71/6.12.9/6.13-rc6 ovl encoding error (Nessus ID 233479 / WID-SEC-2025-0119)

Vuldb Updates
9 months ago
A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.71/6.12.9/6.13-rc6. The impacted element is an unknown function of the component ovl. Executing manipulation can lead to encoding error. This vulnerability is tracked as CVE-2025-21654. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2024-57924 | Linux Kernel up to 6.12.9/6.13-rc6 encode_fh encoding error (Nessus ID 233479 / WID-SEC-2025-0119)

Vuldb Updates
9 months ago
A vulnerability classified as problematic has been found in Linux Kernel up to 6.12.9/6.13-rc6. The impacted element is the function encode_fh. This manipulation causes encoding error. This vulnerability is registered as CVE-2024-57924. The attack requires access to the local network. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-57929 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 /dev/sdc dm_bm_read_lock initialization (Nessus ID 214901 / WID-SEC-2025-0119)

Vuldb Updates
9 months ago
A vulnerability was found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. It has been declared as problematic. Affected by this vulnerability is the function dm_bm_read_lock of the file /dev/sdc. The manipulation results in improper initialization. This vulnerability was named CVE-2024-57929. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

An AI Index for all our customers

不安全
9 months ago
Cloudflare推出AI Index for domains的私有测试版，旨在帮助内容创作者让数据更易被AI发现，并为AI开发者提供高质量数据访问。该工具提供API和实时更新功能，支持按需支付和公平补偿机制。同时，Cloudflare将构建Open Index聚合层，方便大规模内容检索与管理。

Monitoring AS-SETs and why they matter

不安全
9 months ago
文章介绍了AS-SETs在互联网路由中的作用及其重要性。AS-SETs用于分组相关网络，并构建BGP路由策略以防止路由泄露。Cloudflare Radar新增功能帮助监控和管理AS-SETs成员资格，提升网络安全性。

Cloudflare just got faster and more secure, powered by Rust

不安全
9 months ago
Cloudflare升级其核心网络软件FL至FL2，采用Rust与Oxy框架提升性能与安全性。新系统减少响应时间10ms，性能提升25%，并支持更快的产品开发与更高效的资源利用。通过模块化设计与自动化测试确保平稳过渡。

CVE-2025-21647 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 sch_cake out-of-bounds (Nessus ID 215144 / WID-SEC-2025-0119)

Vuldb Updates
9 months ago
A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. Affected by this issue is some unknown functionality of the component sch_cake. Performing manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2025-21647. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

Are Your Secrets Management Practices Up to Par?

Security Boulevard
9 months ago

Why Are Non-Human Identities Crucial in Cybersecurity? How often do we consider machine identities when contemplating cybersecurity measures? It’s clear that non-human identities (NHIs) are essential players in maintaining robust security frameworks. These identities, often overlooked, are vital in fortifying enterprises, particularly across industries such as healthcare, financial services, and beyond. Machine identities, while lacking […]

The post Are Your Secrets Management Practices Up to Par? appeared first on Entro.

The post Are Your Secrets Management Practices Up to Par? appeared first on Security Boulevard.

Alison Mack

Staying Ahead of Cyber Threats with Proactive NHIs

Security Boulevard
9 months ago

Are You Prepared for the Next Cybersecurity Threat? Where cyber threats evolve faster than yesterday’s news, staying ahead requires a multi-faceted approach. One significant area of focus is the management of Non-Human Identities (NHIs), crucial components. But what precisely makes NHIs so significant, and how can organizations across various industries leverage them effectively? Understanding Non-Human […]

The post Staying Ahead of Cyber Threats with Proactive NHIs appeared first on Entro.

The post Staying Ahead of Cyber Threats with Proactive NHIs appeared first on Security Boulevard.

Alison Mack

Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks

Security Affairs
9 months ago
Microsoft Threat Intelligence researchers found a new XCSSET macOS malware variant used in limited attacks. Microsoft Threat Intelligence researchers have discovered a new version of the macOS malware XCSSET that has been employed in limited attacks. Trend Micro first spotted the malware in 2020 when it was spreading through Xcode projects and exploiting two zero-day vulnerabilities […]
Pierluigi Paganini

Managed ad