Lucene search
+L

6349 matches found

Github Security Blog
Github Security Blog
•added 2025/06/04 12:52 a.m.•6 views

Malware in express-api-sync

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/06/04 12:52 a.m.•5 views

Malware in system-health-sync-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/04 12:52 a.m.•15 views

Malicious code in system-health-sync-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/04 12:52 a.m.•17 views

Malicious code in express-api-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efac302be698778eb5fe49cde2fadcf3d675910622eaf3387754f96e332f87f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/06/04 12:52 a.m.•11 views

MAL-2025-4683 Malicious code in express-api-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efac302be698778eb5fe49cde2fadcf3d675910622eaf3387754f96e332f87f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2025/06/04 12:52 a.m.•13 views

MAL-2025-4695 Malicious code in system-health-sync-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•19 views

SAMSUNG Internet 安全漏洞

SAMSUNG Internet is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a browser function. A security vulnerability exists in SAMSUNG Internet versions prior to 28.0.0.59, which stems from mishandling of insufficient privileges in the SyncClientProvider, which cou...

7.1CVSS6.3AI score0.00115EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/06/04 12:00 a.m.•32 views

Vulnerabilities of the hci_cmd_sync_queue(), hci_le_terminate_big(), or hci_le_big_terminate() functions in the Linux operating system, allowing attackers to cause service failures

The vulnerabilities of the hcicmdsyncqueue, hcileterminatebig, or hcilebigterminate functions in the Linux operating system are related to memory leaks. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00159EPSS
SaveExploits0References8Affected Software5
RedhatCVE
RedhatCVE
•added 2025/05/26 12:13 a.m.•33 views

CVE-2025-48752

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

2.9CVSS7.3AI score0.00338EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/24 3:30 a.m.•21 views

GHSA-MQWX-R894-9HFP Process Sync has a Potential Unsound Issue in SharedMutex

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

2.9CVSS7.2AI score0.00338EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/05/24 3:30 a.m.•24 views

Process Sync has a Potential Unsound Issue in SharedMutex

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

9.8CVSS6.8AI score0.00338EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/05/24 3:15 a.m.•16 views

CVE-2025-48752

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

9.8CVSS5.8AI score0.00338EPSS
SaveExploits1References2
NVD
NVD
•added 2025/05/24 3:15 a.m.•23 views

CVE-2025-48752

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

9.8CVSS0.00338EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/05/24 12:00 a.m.•20 views

PT-2025-22829 · Unknown · Process-Sync

Name of the Vulnerable Software and Affected Versions: process-sync crate version 0.2.2 Description: The issue is related to the drop function in the process-sync crate for Rust, which lacks a check to ensure the pthread mutex is unlocked. Recommendations: For process-sync crate version 0.2.2,...

2.9CVSS6.3AI score0.00338EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/05/24 12:00 a.m.•12 views

CVE-2025-48752

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

2.9CVSS7AI score0.00338EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/24 12:00 a.m.•5 views

CVE-2025-48752: Use After Free

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

9.8CVSS5.8AI score0.00338EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/24 12:00 a.m.•17 views

Process Sync 资源管理错误漏洞

Process Sync is an application for multi-process environments by Andrei Odintsov, a personal developer. A resource management error vulnerability exists in Process Sync version 0.2.2, which stems from a missing pthreadmutex unlock check...

2.9CVSS6.5AI score0.00338EPSS
SaveExploits1References3
CVE
CVE
•added 2025/05/24 12:00 a.m.•80 views

CVE-2025-48752

In the Rust process-sync crate, version 0.2.2, the Drop implementation fails to verify whether the pthread_mutex is unlocked. This is the stated root cause of CVE-2025-48752, per multiple connected feeds. The sources do not provide exploit details, affected vectors beyond the mutex unlock check i...

9.8CVSS7AI score0.00338EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2025/05/24 12:00 a.m.•3 views

CVE-2025-48752

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

9.8CVSS0.00338EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/05/24 12:00 a.m.•37 views

CVE-2025-48752

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...

2.9CVSS0.00338EPSS
SaveExploits1References2
Rows per page
Query Builder