This content discusses the development of a phishing URL detector focused on identifying phishing attempts based solely on URL text analysis. The detector achieves about 90% detection on unseen phishing URLs but struggles with false positives and phishing hosted on compromised legitimate sites. It highlights challenges such as phishing URLs hosted on trusted domains like docs.google.com and the difficulty of blocking such domains outright. The tool is open source and intended as a learning resource rather than an active threat report.
The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected server.
Successful exploitation of this vulnerability enables an attacker to execute arbitrary code on the server with the privileges of the WSO2 product. This could lead to a full compromise of the system.
A user on Reddit's r/cybersecurity subreddit reported that the SSL/TLS certificate for the website ic3.gov appears to be expired when accessed via Chrome on two different networks. No further technical details or vendor advisories are provided regarding this certificate expiration.
A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation related to uninitialized values in the mptcp_write_data_fin function has been resolved. The issue occurs when sending a DATA_FIN without data, where certain checksum fields were not properly initialized due to changes in packet processing code. This could lead to incorrect packet formation.
A vulnerability in the Linux kernel's Qualcomm iris media driver related to runtime power management (PM) reference leaks has been resolved. The issue involved improper handling of runtime PM usage counts, which could be leaked on failure conditions. The fix ensures that pm_runtime_resume_and_get() is used to avoid leaks and that pm_runtime_put_sync() is always called to keep runtime PM references balanced.
A vulnerability in the Linux kernel's SMB server component was resolved by ensuring asynchronous requests are canceled when closing a connection. Previously, an async request might remain pending during connection closure, preventing the connection from closing properly.
A vulnerability in the Linux kernel's KVM PPC Book3S HV subsystem causes a secure device page leak when uv_page_in() fails during kvmppc_svm_page_in(). This leak permanently consumes an entry from the secure memory pool, leaks memory structures, and marks the guest frame number as secure and unusable for the VM's lifetime. The issue affects POWER9/10 systems running Ultravisor/PEF and is triggered by uv_page_in() errors such as UV pool exhaustion. The problem is fixed by applying the same resource cleanup pattern used in a related function, ensuring proper release of locked pages and memory structures.
A vulnerability in the Linux kernel related to sysctl handling was resolved by re-adding a range check in the function do_proc_int_conv_ms_jiffies_minmax. This check had been incorrectly removed by a previous commit. The issue pertains to ensuring proper validation of input ranges for kernel parameters.
lwIP versions up to 2.2.1 have a stack out-of-bounds write vulnerability in the mdns_handle_response function. This flaw allows attackers on the local network to send malformed mDNS responses with invalid domain names, causing a stack buffer overflow. Specifically, oversized RDLENGTH values in multicast PTR answers or undersized RDLENGTH values below 6 in SRV answers during service searches can overflow a 256-byte stack buffer, potentially crashing the device.
A vulnerability in the Linux kernel related to the accel/amdxdna component has been resolved by disabling device buffer exporting, which was never intended to be supported. This fix explicitly prevents exporting of device buffers.
A code injection vulnerability exists in WongKinYiu yolov9 version 0.1 within the DetectMultiBackend.__init__ function in models/common.py, specifically in the ONNX Metadata Handler component. This vulnerability arises from manipulation of the argument names/stride. Remote exploitation is possible, and a public exploit disclosure exists. The project has been informed but has not yet responded or issued a fix. The CVSS 3.1 base score is 6.3, indicating a medium severity impact with low confidentiality, integrity, and availability impacts.
A cross-site scripting (XSS) vulnerability exists in AUTOMATIC1111 stable-diffusion-webui versions up to 1.10.1. The issue is in the read_metadata_from_safetensors function within the Extra-Networks Card Builder component. Manipulation of the __metadata__.sshs_model_hash argument can lead to XSS. The vulnerability can be exploited remotely. Public exploit code is available. The project has been informed but has not yet issued a response or patch.
A vulnerability in the Linux kernel's EDAC/altera driver was resolved by changing the device resource management in the altr_portb_setup() function. The fix anchors the devres group and devm-managed IRQ requests to the actual parent device instead of an embedded device structure, ensuring consistent resource management and teardown.
libLAS versions up to 1.8.1 have a heap out-of-bounds write vulnerability in the point record reader. This occurs due to truncation of the schema byte size to 16 bits when sizing the point buffer. Maliciously crafted .las files with a LASSchema variable length record exceeding 65535 bytes can cause memory corruption and crashes in tools like lasinfo, las2las, or las2txt.
Schroedinger libschroedinger versions up to 1.0.11 contain a divide by zero vulnerability. This flaw allows attackers to cause a denial of service by crashing applications when a zero value is supplied for slice_bytes_denom or slice count in a Dirac stream. The vulnerability triggers a SIGFPE signal during parsing of crafted low-delay pictures.
Schroedinger libschroedinger versions through 1.0.11 have an out-of-bounds read vulnerability. This flaw occurs when unvalidated wavelet filter index or transform depth values are supplied, allowing attackers to read beyond a static quantiser table. Specifically, crafted low-delay Dirac streams with a wavelet filter index of 7 or more, or transform depth of 5 or 6, can cause decoding applications to crash. The vulnerability has a medium severity rating with a CVSS score of 5.5.
Vita3K versions before build 4187 have a path traversal (zip slip) vulnerability in the install_archive_content() function. This flaw allows attackers to craft .vpk archive files with malicious path entries containing '..' segments or absolute paths, enabling them to write files outside the intended install directory. Such unauthorized file writes can lead to execution of attacker-controlled code on the host system. The vulnerability has a medium severity rating with a CVSS score of 5.5. No official patch links are provided, and no known exploits are reported in the wild.
OneUptime versions 14.0.2 up to but not including 14.0.69 contain an authorization vulnerability that allows authenticated project members to perform actions on clusters beyond their authorized scope. This is due to improper project-wide permission checks. Exploitable features include AI access test, agent reset, kubectl plan approval, and incident AI conversation, enabling unauthorized RBAC permission discovery, agent disconnection, approval of kubectl changes, and command execution on unauthorized resources.