Aggregator

CVE-2023-1670 | Linux Kernel Xircom 16-bit PCMCIA Ethernet Driver xirc2ps_cs.c xirc2ps_detach use after free (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function xirc2ps_detach of the file drivers/net/ethernet/xircom/xirc2ps_cs.c of the component Xircom 16-bit PCMCIA Ethernet Driver. The manipulation leads to use after free. This vulnerability is traded as CVE-2023-1670. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2023-28466 | Linux Kernel up to 6.2.6 net/tls/tls_main.c do_tls_getsockopt null pointer dereference (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.2.6. It has been rated as problematic. Affected by this issue is the function do_tls_getsockopt of the file net/tls/tls_main.c. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2023-28466. The attack can only be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2023-52435 | Linux Kernel up to 4.7/6.6.10 Net skb_segment denial of service (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability was found in Linux Kernel up to 4.7/6.6.10. It has been declared as problematic. This vulnerability affects the function skb_segment of the component Net. The manipulation leads to denial of service. This vulnerability was named CVE-2023-52435. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-52525 | Linux Kernel up to 6.5.6 mwifiex mwifiex_process_rx_packet buffer overflow (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.5.6. This vulnerability affects the function mwifiex_process_rx_packet of the component mwifiex. The manipulation leads to buffer overflow. This vulnerability was named CVE-2023-52525. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-52609 | Linux Kernel up to 6.7.1 binder mmput allocation of resources (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.7.1. This affects the function mmput of the component binder. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2023-52609. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-52644 | Linux Kernel up to 6.8.1 b43 buffer overflow (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.8.1. Affected by this issue is some unknown functionality of the component b43. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2023-52644. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-52577 | Linux Kernel up to 6.5.5 dccp_v4_err/dccp_v6_err information disclosure (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.5.5 and classified as problematic. This issue affects the function dccp_v4_err/dccp_v6_err. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2023-52577. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-52705 | Linux Kernel up to 6.1.12 nilfs2 nilfs_resize_fs out-of-bounds (Nessus ID 239742)

Vuldb Updates
8 months 1 week ago
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.1.12. This affects the function nilfs_resize_fs of the component nilfs2. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2023-52705. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-23170 | mbed TLS up to 2.28.6/3.5.1 timing discrepancy (FEDORA-2024-bfd98be425 / EUVD-2024-20689)

Vuldb Updates
8 months 1 week ago
A vulnerability, which was classified as problematic, was found in mbed TLS up to 2.28.6/3.5.1. This affects an unknown part. The manipulation leads to observable timing discrepancy. This vulnerability is uniquely identified as CVE-2024-23170. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-6364 | code-projects Simple Pizza Ordering System 1.0 /adduser-exec.php Username sql injection (EUVD-2025-18790)

Vuldb Updates
8 months 1 week ago
A vulnerability has been found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adduser-exec.php. The manipulation of the argument Username leads to sql injection. This vulnerability is known as CVE-2025-6364. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-6367 | D-Link DIR-619L 2.06B01 formSetDomainFilter curTime/sched_name_%d/url_%d stack-based overflow (EUVD-2025-18788)

Vuldb Updates
8 months 1 week ago
A vulnerability was found in D-Link DIR-619L 2.06B01. It has been declared as critical. This vulnerability affects unknown code of the file /goform/formSetDomainFilter. The manipulation of the argument curTime/sched_name_%d/url_%d leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2025-6367. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

INC

Dark Feed IO
8 months 1 week ago

You must login to view this content

cohenido

Hackers Target 700+ ComfyUI AI Image Generation Servers to Spread Malware

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 1 week ago

China’s National Cybersecurity Notification Center has issued an urgent warning about critical vulnerabilities in ComfyUI, a widely used image-generation framework for large AI models. These flaws, already under active exploitation by hacker groups, have compromised at least 695 servers worldwide, according to threat intelligence from XLab. The attackers are deploying a sophisticated backdoor named “Pickai,” […]

The post Hackers Target 700+ ComfyUI AI Image Generation Servers to Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Managed ad