-
CVE-2024-8612: A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. (23-09-2024)
Preface: When you got a valid non-NULL pointer to a memory address returned by malloc(), only the requested size of memory is allocated to your process and you’re allowed to use (read and / or write) into that much space only. Background: When you launch a KVM-based guest, most often you would see QEMU doing…
-
CVE-2024-8375: A vulnerability has been found in Google Deepmind Reverb object deserialization. (20-09-2024)
Preface: As companies and researchers leave Tensorflow and move to PyTorch, Google seems interested in moving its products to JAX to solve some of Tensorflow’s pain points, such as the complexity of the API and the complexity of training in custom chips such as TPUs. PyTorch optimizes performance by taking advantage of Python’s native support…
-
CVE-2024-45523 Resource Leak in Bravura Security Fabric API After a Failed Login Attempt (19-09-2024)
Preface: Originally founded in 1992 as M-Tech Information Technology, acquired by Hitachi, Ltd. in 2008, and acquired by the Volaris Group in 2022, Bravura Security, Inc is a leading provider of identity, privileged access, password, and passwordless solutions. Bravura Security Fabric brings together all the benefits of SaaS plus IAM & PAM into one comprehensive…
-
CVE-2024-39926 – Vaultwarden is also plagued by XSS (17th Sep 2024)
Preface: Enables Vaultwarden’s built-in HTTPS functionality (via the Rocket web framework). Rocket’s HTTPS implementation is relatively immature and has limited functionality. Rocket is a web framework written in Rust. It supports HTTP requests, Web Sockets JSON, templating and more. Its design was inspired by Rails, Flask, Bottle, and Yesod. Background: Vaultwarden is an unofficial Bitwarden…
-
In the Linux kernel, the CVE-2024-46713 vulnerability has been resolved. The AUX buffer is strictly a sub-buffer, serialize using aux_mutex to avoid complications. (16Sep 2024)
Preface: A mutex is a mutual exclusion lock. Only one thread can hold the lock. Mutexes are used to protect data or other resources from concurrent access. A mutex has attributes, which specify the characteristics of the mutex. Background: During the boot process, the console provides a lot of important information about the initial phase…
-
About Android Framework: Bypass CVE-2022-20338, formed CVE-2024-40662 (11th Sep 2024).
Preface: What is a malformed URI? The JavaScript exception “malformed URI sequence” occurs when URI encoding or decoding wasn’t successful. Background: URI definition In computer terms, a Uniform Resource Identifier (URI) is a string used to identify the name of a certain network resource. This identification allows users to interact with any resource (including local…
-
CVE-2024-45327: Design weakness on FortiSOAR! (12th Sep 2024)
Preface: In session hijacking, an attacker gets hold of a valid user session to gain unauthorized access to the account. This is typically done through three methods: Brute force: The attacker keeps trying session IDs until they are successful. Calculation: If the session IDs are generated in a non-random manner, the attacker can calculate them.…
-
CVE-2024-40754: Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine (11th Sep 2024)
Preface: A stack is not flexible, the memory size allotted cannot be changed whereas a heap is flexible, and the allotted memory can be altered. Background: Escargot is a memory optimized JavaScript engine for mid-range devices such as mobile phone, tablet and TV. C++. •. GNU Lesser General Public License v2.1. Memory Efficiency: The engine…
-
CVE-2024-33050 – Buffer Over-read in WLAN Host Communication (10th Sep 2024)
Preface: In computer programming, transient is a property of any element in the system that is temporary. The term applies to transient applications. Background: Within frequency, In-band discovery is used for communication between 6 GHz devices. There are three in-band discovery methods: Fast Initial Link Setup (FILS) and Unsolicited Probe Response (UPR) frames are passive…
-
CVE-2024-42024: veeam did not disclosed the details, perhaps this story can tell (9th Sep 2024)
Preface: Veeam ONE agent is a component that enables communication with Veeam Backup & Replication servers, performs collection of logs, and sends remediation commands. It is recommended to install Veeam ONE agent to improve data collection performance in large-scale Veeam Backup & Replication infrastructures. Background: Veeam ONE supports two deployment scenarios: • All-in-one The all-in-one…