Aggregator

A vulnerability was found in Linux Kernel up to 5.18. It has been rated as problematic. Impacted is the function malidp_check_pages_threshold of the file drivers/gpu/drm/arm/malidp_planes.c. Performing manipulation results in unchecked return value. This vulnerability is reported as CVE-2023-23004. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 5.16.2 and classified as problematic. This affects the function dwc3_qcom_probe of the file drivers/usb/dwc3/dwc3-qcom.c. Performing manipulation of the argument dwc3_qcom_create_urs_usb_platdev results in unchecked return value. This vulnerability is known as CVE-2023-22999. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.16.2. It has been declared as problematic. This issue affects the function qca_serdev_probe of the file drivers/bluetooth/hci_qca.c. Such manipulation of the argument devm_gpiod_get_index_optional leads to unchecked return value. This vulnerability is documented as CVE-2023-23002. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability identified as problematic has been detected in Linux Kernel up to 5.16. The impacted element is the function tegra_xusb_find_port_node of the file drivers/phy/tegra/xusb.c. The manipulation leads to unchecked return value. This vulnerability is traded as CVE-2023-23000. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.0.2. Affected by this issue is the function virtio_gpu_object_shmem_init of the file drivers/gpu/drm/virtio/virtgpu_object.c. Such manipulation of the argument drm_gem_shmem_get_sg_table leads to unchecked return value. This vulnerability is traded as CVE-2023-22998. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

The group Lunar Spider—also known under the aliases Gold SwathMore and Elara—has ramped up a new malicious campaign

The post Lunar Spider Campaign: FakeCAPTCHA Used to Exploit CORS Flaws and Deliver Latrodectus Loader appeared first on Penetration Testing Tools.

月满山河，人间团圆。愿你怀揣的圆满，不止今日，更在往后的每一天。InForSec祝全球华人学者中秋快乐，阖家幸福！

A hacker collective known as UAT-8099 is presently conducting an active campaign to promote malicious content in search

The post Cisco Talos Exposes UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft appeared first on Penetration Testing Tools.

The vulnerability rewards platform HackerOne has announced that over the past twelve months, white-hat hackers around the world

The post HackerOne Payouts Hit $81 Million: AI Vulnerability Reports Soar by Over 200% appeared first on Penetration Testing Tools.

In September 2025, Microsoft began gradually discontinuing support for embedded SVG images in Outlook for the web and

The post Microsoft Discontinues Embedded SVG Support in Outlook for Enhanced Security appeared first on Penetration Testing Tools.

Windows 11 has received another major update — version 25H2, officially known as Windows 11 2025 Update. This

The post Windows 11 2025 Update (25H2) Focuses on Security and Legacy Component Removal appeared first on Penetration Testing Tools.

Amid the ongoing duel between Linux kernel developers and authors of malicious modules, each kernel release reshuffles the

The post FlipSwitch Rootkit Bypasses Linux Kernel 6.9 Defenses with Surgical Bytecode Hooking appeared first on Penetration Testing Tools.

The final release of OpenSSL 3.6 has been officially published — the culmination of the collective efforts of

The post OpenSSL 3.6 Released: Major Cryptography Update Adds LMS Signatures and NIST PKEY Support appeared first on Penetration Testing Tools.

On September 29, the Intermediate People’s Court of Wenzhou delivered a verdict in the high-profile case of the

The post China Sentences 11 Members of Myanmar’s Min Clan Crime Syndicate to Death appeared first on Penetration Testing Tools.

Oracle警告了一个关键的零日漏洞CVE-2025-61882，该漏洞存在于E-Business Suite的Concurrent Processing组件中，允许攻击者在无需认证的情况下远程执行代码。Clop勒索软件团伙已利用此漏洞进行数据窃取攻击。 Oracle已发布紧急更新修复该漏洞，并提醒用户需先安装之前的补丁才能应用新补丁。

BBC journalist Joe Tidy found himself entangled in a scenario that ordinarily lurks in the shadows of the

The post BBC Journalist Targeted in $100M Ransomware Scam, Offered Bitcoin Payout to Become Insider Threat appeared first on Penetration Testing Tools.

A new Android banking trojan known as Klopatra has infected more than three thousand smartphones within just a

The post Klopatra: New Android RAT Uses Hidden VNC and Commercial Obfuscation to Hijack European Banking Accounts appeared first on Penetration Testing Tools.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.10.13/6.11.2. Affected by this vulnerability is the function drr_timing of the component AMD Display. The manipulation results in improper initialization. This vulnerability is identified as CVE-2024-49898. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.11.2. It has been rated as critical. Affected is the function amdgpu_dm of the component AMD Display. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2024-49896. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is advised.