Aggregator

CVE-2021-47567 | Linux Kernel up to 5.10.82/5.15.5 emergency_ctx stack-based overflow (dfe906da9a1a/c4e3ff8b8b1d/5bb60ea611db / Nessus ID 247444)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Linux Kernel up to 5.10.82/5.15.5. It has been rated as critical. This issue affects the function emergency_ctx. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2021-47567. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-35920 | Linux Kernel up to 6.6.26/6.8.5 mediatek ctx_list null pointer dereference (0a2dc707aa42/23aaf8241210/6467cda18c9f / Nessus ID 247448)

Vuldb Updates
4 months 1 week ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.26/6.8.5. Affected by this issue is the function ctx_list of the component mediatek. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-35920. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

INC

Dark Feed IO
4 months 1 week ago

You must login to view this content

cohenido

CVE-2016-9120 | Linux Kernel up to 4.5 ion.c ion_ioctl use after free (Nessus ID 247451 / BID-94669)

Vuldb Updates
4 months 1 week ago
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 4.5. This affects the function ion_ioctl of the file drivers/staging/android/ion/ion.c. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2016-9120. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-33619 | Linux Kernel up to 6.1.92/6.6.32/6.9.3 libstub priv.runtime_map uninitialized pointer (Nessus ID 247452)

Vuldb Updates
4 months 1 week ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.92/6.6.32/6.9.3. Affected is an unknown function of the component libstub. The manipulation of the argument priv.runtime_map leads to uninitialized pointer. This vulnerability is traded as CVE-2024-33619. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-0745 | Mozilla Firefox up to 121 WebAudio stack-based overflow (Nessus ID 247453)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Mozilla Firefox up to 121. It has been rated as critical. Affected by this issue is some unknown functionality of the component WebAudio. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-0745. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2021-47509 | Linux Kernel up to 5.15.7 ALSA allocation of resources (Nessus ID 247459)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Linux Kernel up to 5.15.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the component ALSA. The manipulation leads to allocation of resources. This vulnerability is handled as CVE-2021-47509. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

The Hackers News
4 months 1 week ago
A novel attack technique could be weaponized to rope thousands of public domain controllers (DCs) around the world to create a malicious botnet and use it to conduct powerful distributed denial-of-service (DDoS) attacks. The approach has been codenamed Win-DDoS by SafeBreach researchers Or Yair and Shahak Morag, who presented their findings at the DEF CON 33 security conference today. "As we
The Hacker News

Google Hacked – Approx 2.5 Million Records of Google Ads Customer Data Leaked

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 1 week ago

Google has disclosed a significant data breach involving one of its corporate Salesforce instances, compromising customer data tied to its Google Ads platform. Google has not revealed the exact number of people impacted, but according to ShinyHunters, who spoke with Cyber Security News, the breach exposed around 2.5 million records (Approx). Whether some of these […]

The post Google Hacked – Approx 2.5 Million Records of Google Ads Customer Data Leaked appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Balaji

CVE-2019-19055 | Linux Kernel net/wireless/nl80211.c nl80211_get_ftm_responder_stats resource consumption (Nessus ID 247462)

Vuldb Updates
4 months 1 week ago
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function nl80211_get_ftm_responder_stats of the file net/wireless/nl80211.c. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2019-19055. It is possible to launch the attack remotely. There is no exploit available. The real existence of this vulnerability is still doubted at the moment.
vuldb.com

CVE-2024-26895 | Linux Kernel up to 6.8.1 wilc1000 wilc_netdev_cleanup use after free (Nessus ID 247461)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.8.1. It has been declared as critical. Affected by this vulnerability is the function wilc_netdev_cleanup of the component wilc1000. The manipulation leads to use after free. This vulnerability is known as CVE-2024-26895. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-10720 | GRO up to 5.1 Linux Kernel use after free (Bug 1781204 / Nessus ID 247464)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in GRO up to 5.1. It has been rated as critical. This issue affects some unknown processing of the component Linux Kernel. The manipulation leads to use after free. The identification of this vulnerability is CVE-2020-10720. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-8852 | WuKongOpenSource WukongCRM 11.0 API Response /adminFile/upload information exposure (Issue 26)

VulDB Recent Entries
4 months 1 week ago
A vulnerability classified as problematic has been found in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/upload of the component API Response Handler. The manipulation leads to information exposure through error message. This vulnerability is uniquely identified as CVE-2025-8852. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-8851 | LibTIFF up to 4.5.1 tiffcrop tools/tiffcrop.c readSeparateStripsetoBuffer stack-based overflow

VulDB Recent Entries
4 months 1 week ago
A vulnerability was found in LibTIFF up to 4.5.1. It has been rated as critical. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-8851. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad