Aggregator

CVE-2017-12985 | Apple macOS up to 10.13.1 tcpdump memory corruption (HT208221 / Nessus ID 100472)

1 month 2 weeks ago

A vulnerability was found in Apple macOS up to 10.13.1. It has been classified as critical. The impacted element is an unknown function of the component tcpdump. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2017-12985. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

vuldb.com

CVE-2017-12990 | Apple macOS up to 10.13.1 tcpdump resource management (HT208221 / Nessus ID 100472)

Vuldb Updates

1 month 2 weeks ago

A vulnerability labeled as critical has been found in Apple macOS up to 10.13.1. Affected by this issue is some unknown functionality of the component tcpdump. Executing manipulation can lead to improper resource management. This vulnerability is registered as CVE-2017-12990. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

vuldb.com

CVE-2014-9114 | util-linux up to 2.25 Blkid blkid.c command injection (Nessus ID 95547 / ID 167685)

Vuldb Updates

1 month 2 weeks ago

A vulnerability categorized as problematic has been discovered in util-linux up to 2.25. The impacted element is an unknown function of the file blkid.c of the component Blkid. Such manipulation leads to command injection. This vulnerability is listed as CVE-2014-9114. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

vuldb.com

CVE-2017-12992 | tcpdump up to 4.9.1 RIPng Parser print-ripng.c ripng_print memory corruption (Nessus ID 103257 / ID 370625)

Vuldb Updates

1 month 2 weeks ago

A vulnerability labeled as critical has been found in tcpdump up to 4.9.1. Impacted is the function ripng_print of the file print-ripng.c of the component RIPng Parser. Executing manipulation can lead to memory corruption. This vulnerability is handled as CVE-2017-12992. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

vuldb.com

Anubis

Dark Feed IO

1 month 2 weeks ago

You must login to view this content

cohenido

Intellexa remotely accessed Predator spyware customer systems, investigation finds

CyberScoop

1 month 2 weeks ago

It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings.

The post Intellexa remotely accessed Predator spyware customer systems, investigation finds appeared first on CyberScoop.

Tim Starks

NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices

Bleeping Computer.

1 month 2 weeks ago

The UK's National Cyber Security Center (NCSC) announced the testing phase of a new service called Proactive Notifications, designed to inform organizations in the country of vulnerabilities present in their environment. [...]

Bill Toulas

Officials warn about expansive, ongoing China espionage threat riding on Brickstorm malware

CyberScoop

1 month 2 weeks ago

The attacks, which have impacted dozens of organizations, date back at least three years, lasting an average of 393 days. And that’s just what’s been uncovered in the last four months.

The post Officials warn about expansive, ongoing China espionage threat riding on Brickstorm malware appeared first on CyberScoop.

Matt Kapko

CVE-2024-36974 | Linux Kernel up to 6.10-rc2 taprio_parse_mqprio_opt injection (f921a58ae208 / Nessus ID 207802)

Vuldb Updates

1 month 2 weeks ago

A vulnerability was found in Linux Kernel up to 6.10-rc2. It has been classified as problematic. Affected by this vulnerability is the function taprio_parse_mqprio_opt. Performing manipulation results in injection. This vulnerability is reported as CVE-2024-36974. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is recommended.

vuldb.com

CVE-2024-36971 | Linux Kernel up to 6.10-rc1 __dst_negative_advice use after free (92f1655aa2b2 / Nessus ID 207738)

Vuldb Updates

1 month 2 weeks ago

A vulnerability identified as critical has been detected in Linux Kernel up to 6.10-rc1. The affected element is the function __dst_negative_advice. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2024-36971. Local access is required to approach this attack. Moreover, an exploit is present. You should upgrade the affected component.

vuldb.com

CVE-2024-36967 | Linux Kernel up to 5.15.159/6.1.91/6.6.31/6.8.10/6.9.1 tpm2_key_encode memory leak (Nessus ID 238278 / WID-SEC-2025-1293)

Vuldb Updates

1 month 2 weeks ago

A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.159/6.1.91/6.6.31/6.8.10/6.9.1. Affected by this vulnerability is the function tpm2_key_encode. Performing manipulation results in memory leak. This vulnerability is known as CVE-2024-36967. Access to the local network is required for this attack. No exploit is available. You should upgrade the affected component.

vuldb.com

CVE-2024-36927 | Linux Kernel up to 6.6.30/6.8.9 ipv4 __ip_make_skb uninitialized resource (5db08343ddb1/f5c603ad4e6f/fc1092f51567 / Nessus ID 209785)

Vuldb Updates

1 month 2 weeks ago

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.30/6.8.9. This affects the function __ip_make_skb of the component ipv4. The manipulation leads to uninitialized resource. This vulnerability is documented as CVE-2024-36927. The attack requires being on the local network. There is not any exploit available. You should upgrade the affected component.

vuldb.com

CVE-2024-36939 | Linux Kernel up to 6.8.9 Net Namespace /proc/net/sunrpc/nfs rpc_proc_register privilege escalation (Nessus ID 207773 / WID-SEC-2025-1293)

Vuldb Updates

1 month 2 weeks ago

A vulnerability classified as problematic has been found in Linux Kernel up to 6.8.9. This vulnerability affects the function rpc_proc_register of the file /proc/net/sunrpc/nfs of the component Net Namespace Handler. Performing manipulation results in privilege escalation. This vulnerability was named CVE-2024-36939. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.

vuldb.com

CVE-2024-36905 | Linux Kernel up to 6.8.9 tcp_rcv_space_adjust allocation of resources (Nessus ID 208951 / WID-SEC-2025-1293)

Vuldb Updates

1 month 2 weeks ago

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.8.9. This vulnerability affects the function tcp_rcv_space_adjust. Executing manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2024-36905. The attack is only possible within the local network. No exploit exists. You should upgrade the affected component.

vuldb.com

CVE-2024-36917 | Linux Kernel up to 6.1.90/6.6.30/6.8.9 block blk_ioctl_discard buffer overflow (Nessus ID 209785 / WID-SEC-2025-1293)

Vuldb Updates

1 month 2 weeks ago

A vulnerability described as critical has been identified in Linux Kernel up to 6.1.90/6.6.30/6.8.9. This affects the function blk_ioctl_discard of the component block. Such manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2024-36917. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.

vuldb.com

A Tale of Two CISOs: Why An Engineering-Focused CISO Can Be a Liability

darkreading

1 month 2 weeks ago

When hiring a CISO, understand the key difference between engineering and holistic security leaders.

David Schwed

Sen. Mark Kelly: Investing in safe, secure AI is key to U.S. dominance

CyberScoop

1 month 2 weeks ago

The Democratic senator from Arizona believes that global AI standards must include American values around civil rights, privacy and safety.

The post Sen. Mark Kelly: Investing in safe, secure AI is key to U.S. dominance appeared first on CyberScoop.

djohnson

Qilin

Dark Feed IO

1 month 2 weeks ago

You must login to view this content

cohenido

Cryptohack Roundup: Authorities Shutter Cryptomixer

BankInfoSecurity.com

1 month 2 weeks ago

Also: Anthropic Warns of Autonomous AI Exploits on Blockchain
This week, authorities shutter Cryptomixer, Anthropic warns about autonomous AI exploits, U.K. plans ban on crypto political donations, Do Kwon seeks leniency, Lazarus Group suspected in Upbit theft, Balancer's post-exploit plans and Yearn recovers some hacked amount.

US, Allies Warn AI in OT May Undermine System Safety

BankInfoSecurity.com

1 month 2 weeks ago

AI in OT May Trigger Cascading Infrastructure Failures
The U.S. cyber defense agency warned that machine learning and large language model deployments can introduce new attack surfaces across critical infrastructure sectors in a document setting out principles for safely integrating AI into operational technology.

Aggregator

Managed ad