MAL-2025-47393 Malicious code in bsd-form-ui-kit (npm)

The package communicates with a domain associated with malicious activity...

poc

Proof of Concepts As the result of plugin writing or just general bug hunting, researchers at Tenable often stumble upon new and interesting vulnerabilities. These vulnerabililities are shared with the community on our company blog, Medium, or through our research advisories. We've decided to...

La MaraDNS

MaraDNS is a small open-source DNS server. It is an authoritative DNS server that handles recursion using the included "Deadwood" program. The MaraDNS repository contains various files, including a README, CHANGELOG, and Dockerfile, which provide information on how to compile and run MaraDNS, as...

Malicious code in bsd-ui-stylekit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41538 Malicious code in bsd-ui-stylekit (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-45112

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.8.1 Description The software is a BSD-licensed C programming library providing streaming access to various archive formats like tar, cpio, pax, zip, and ISO9660 images. It includes bsdtar and bsdcpio...

[SECURITY] Fedora 41 Update: nbdkit-1.40.6-1.fc41

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

CVE-2024-29937

NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption...

[SECURITY] Fedora 42 Update: nbdkit-1.42.3-1.fc42

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

CVE-2011-3336

regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion...

CVE-2002-1915

tip on multiple BSD-based operating systems allows local users to cause a denial of service execution prevention by using flock to lock the /var/log/acculog file...

SUSE SLES15 : Recommended update for python3-M2Crypto (SUSE-SU-SUSE-RU-2025:0800-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0800-1 advisory. - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove...

SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for python3-M2Crypto (SUSE-SU-SUSE-RU-2025:0796-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0796-1 advisory. - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, n...

SUSE-RU-2025:0800-1 Recommended update for python3-M2Crypto

This update for python3-M2Crypto fixes the following issues: - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove python-M2Crypto.keyring, because PyPI broke GPG support - Build for modern python stack on SLE/Leap - require setuptools -...

SUSE-RU-2025:0796-1 Recommended update for python3-M2Crypto

This update for python3-M2Crypto fixes the following issues: - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove python-M2Crypto.keyring, because PyPI broke GPG support - Build for modern python stack on SLE/Leap - require setuptools -...

Linux Distros Unpatched Vulnerability : CVE-2014-7844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address. CVE-2014-7844 Note that Nessus relies on the...

SUSE CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

CVE-2024-41173

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker...

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD, related to operations beyond the buffer in memory, allows attackers to exploit their privileges, execute arbitrary code, or cause system failures.

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, or cause service failure...

PT-2024-38904 · Unknown · Com.Uaudio.Bsd.Helper

Name of the Vulnerable Software and Affected Versions: com.uaudio.bsd.helper service affected versions not specified Description: The issue concerns a lack of proper client validation during XPC inter-process communication IPC in the com.uaudio.bsd.helper service, which handles privileged...