Aggregator

CVE-2024-56542 | Linux Kernel up to 6.11.10/6.12.1 AMD Display drivers/gpu/drm/drm_mm.c memory leak (Nessus ID 216943 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.11.10/6.12.1. This issue affects some unknown processing of the file drivers/gpu/drm/drm_mm.c of the component AMD Display. Executing manipulation can lead to memory leak. This vulnerability is registered as CVE-2024-56542. The attack requires access to the local network. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2024-56543 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 ath12k dp_rx.c rx_tid::ab stack-based overflow (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.63/6.11.10/6.12.1. This vulnerability affects the function rx_tid::ab of the file drivers/net/wireless/ath/ath12k/dp_rx.c of the component ath12k. This manipulation causes stack-based buffer overflow. This vulnerability is handled as CVE-2024-56543. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2024-56540 | Linux Kernel up to 6.11.10/6.12.1 accel ivpu_send_receive_internal null pointer dereference (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as critical was found in Linux Kernel up to 6.11.10/6.12.1. Affected is the function ivpu_send_receive_internal of the component accel. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2024-56540. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2024-56541 | Linux Kernel up to 6.11.10/6.12.1 ath12k_dp_cc_cleanup use after free (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.11.10/6.12.1. This affects the function ath12k_dp_cc_cleanup. The manipulation results in use after free. This vulnerability is known as CVE-2024-56541. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2024-56538 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 zynqmp_kms use after free (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability described as problematic has been identified in Linux Kernel up to 6.6.63/6.11.10/6.12.1. The affected element is an unknown function of the component zynqmp_kms. Executing manipulation can lead to use after free. The identification of this vulnerability is CVE-2024-56538. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2024-56537 | Linux Kernel up to 6.11.10/6.12.1 zynqmp_disp null pointer dereference (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.11.10/6.12.1. This vulnerability affects unknown code of the component zynqmp_disp. Performing manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2024-56537. The attack must originate from the local network. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2024-56539 | Linux Kernel up to 6.12.1 mwifiex scan.c memory corruption (Nessus ID 214457 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.1. This impacts an unknown function of the file drivers/net/wireless/marvell/mwifiex/scan.c of the component mwifiex. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2024-56539. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-56536 | Linux Kernel up to 6.11.10/6.12.1 cw1200 null pointer dereference (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as critical was found in Linux Kernel up to 6.11.10/6.12.1. This affects an unknown part of the component cw1200. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2024-56536. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2024-56535 | Linux Kernel up to 6.11.10/6.12.1 rtw89 btc_fw_set_monreg null pointer dereference (Nessus ID 216493 / WID-SEC-2024-3762)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.11.10/6.12.1. Affected by this issue is the function btc_fw_set_monreg of the component rtw89. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-2024-56535. The attack is only possible within the local network. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

FlashFuzz: A Browser Extension for Quick URL Fuzzing and Secret Scanning

不安全
8 months 3 weeks ago
FlashFuzz是一款专为安全工程师设计的轻量级工具，在浏览器内快速进行侦察。它支持模糊测试所有打开标签页中的URL以发现隐藏端点和潜在秘密（如API密钥），并提供自定义词典、并发请求、扫描JavaScript文件等功能，并可导出结果进行进一步分析。

Cybersecurity jobs available right now: October 14, 2025

Help Net Security
8 months 3 weeks ago

Cyber Security Analyst I First Citizens Bank | USA | Remote – View job details As a Cyber Security Analyst, you will be responsible for developing skills related to the use of the standard intelligence cycle (collection, analysis, and dissemination) across a variety of topics, including geopolitics, cybersecurity, physical security, and fraud/criminal activity. Information Security Risk Officer Davies | India | On-site – View job details As an Information Security Risk Officer, you will be … More →

The post Cybersecurity jobs available right now: October 14, 2025 appeared first on Help Net Security.

Sinisa Markovic

XCSSET macOS恶意软件现新变种 新增浏览器攻击与剪贴板劫持功能

嘶吼
8 months 3 weeks ago

微软威胁情报报告称，在小规模攻击中检测到XCSSET macOS恶意软件的新变种。该变种新增多项功能，包括强化浏览器定向攻击、剪贴板劫持及改进的持久化机制。

XCSSET是一款模块化macOS恶意软件，兼具信息窃取与加密货币窃取功能，可从受感染设备中窃取“备忘录”数据、加密货币钱包信息及浏览器数据。

其传播方式为：搜索设备中存储的其他Xcode项目并植入恶意代码，待目标项目编译构建时，恶意软件便会随之执行。

据悉，XCSSET恶意软件专门针对软件开发人员常用的Xcode项目进行感染，并在Xcode项目编译构建过程中启动运行。据微软评估认为，这种感染与传播模式，利用的是开发苹果或macOS相关应用的开发者之间共享项目文件的行为。

新变种的核心升级点

微软观察到该新变种存在多项关键改动，攻击能力显著增强：

1.  扩展浏览器数据窃取范围：新变种通过安装经篡改的开源工具HackBrowserData构建版本，尝试窃取Firefox浏览器数据。该工具可从浏览器数据存储区中解密并导出数据。

2.  升级剪贴板劫持组件：新增的剪贴板监控功能会扫描macOS剪贴板中与加密货币地址相关的正则表达式模式。

一旦检测到加密货币地址，就会将其替换为攻击者控制的地址——这意味着受感染设备上的用户发起的加密货币转账，会被篡改为向攻击者地址转账。

攻击者与剪贴板劫持者使用的加密货币地址

3.  新增持久化手段：包括创建LaunchDaemon条目以执行~/.root恶意载荷，以及在/tmp目录中伪造“系统设置.app（System Settings.app）”，以此伪装自身活动，确保设备重启后仍能维持恶意驻留。

攻击现状与防御建议

目前该新变种尚未广泛传播，微软表示仅在小规模攻击中发现其踪迹。研究人员已向Apple通报相关发现，并正与GitHub合作移除相关恶意代码仓库。

为防范此类恶意软件，建议采取以下措施：

·及时更新macOS系统及各类应用——鉴于XCSSET此前曾利用包括零日漏洞在内的多个漏洞发起攻击，版本更新是关键防护手段；

·开发者在编译Xcode项目前，务必仔细检查项目内容，尤其是接收他人共享的项目文件时，更需严格核验安全性。

胡金鱼

Managed ad