23015 matches found
OpenJPEG Pointer to Zero DoS
The vulnerability of the OpenJPEG library for image encoding and decoding is related to the assignment of a null pointer in the openjp2/dwt.c file. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
sslscan
This is a tool for scanning SSL/TLS protocols and ciphers on a target server. The tool is called sslscan and is written in C. It is designed to be a command-line interface for scanning SSL/TLS protocols and ciphers on a target server. The tool can be built on various platforms, including Linux an...
Exploit for Out-of-bounds Write in Gnu Glibc
PoC exploit for CVE-2015-0235, a vulnerability in the gethostbyname2r and gethostbynamer functions of the glibc library. The exploit is a shared library wrapper that provides an additional check for the vulnerable functions, preventing them from being called. The target is the glibc library,...
Malicious code in @zalastax/nolb-lion-c (npm)
The package @zalastax/nolb-lion-c was found to contain malicious code...
Malicious code in tansuo-c-gaoji-texing (npm)
The package tansuo-c-gaoji-texing was found to contain malicious code...
Malicious code in @zalastax/nolb-passport-c (npm)
The package @zalastax/nolb-passport-c was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-lib-c (npm)
The package @zalastax/nolb-lion-lib-c was found to contain malicious code...
MAL-2025-43133 Malicious code in @zalastax/nolb-async-c (npm)
The package @zalastax/nolb-async-c was found to contain malicious code...
MAL-2025-43312 Malicious code in @zalastax/nolb-lion-c (npm)
The package @zalastax/nolb-lion-c was found to contain malicious code...
MAL-2025-46237 Malicious code in tansuo-c-gaoji-texing (npm)
The package tansuo-c-gaoji-texing was found to contain malicious code...
Malicious code in @zalastax/nolb-async-c (npm)
The package @zalastax/nolb-async-c was found to contain malicious code...
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
The threat actor behind the malware-as-a-service MaaS framework and loader called CastleLoader has also developed a remote access trojan known as CastleRAT. "Available in both Python and C variants, CastleRAT's core functionality consists of collecting system information, downloading and executin...
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
The threat actor behind the malware-as-a-service MaaS framework and loader called CastleLoader has also developed a remote access trojan known as CastleRAT. "Available in both Python and C variants, CastleRAT's core functionality consists of collecting system information, downloading and executin...
CVE-2025-39719: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hwxlate array Fix a potential out-of-bounds array access of the hwxlate array in bno055.c. In bno055getregmask, hwxlate was iterated over the length of the vals array instead of the length of t...
PT-2025-48935
Уязвимость драйвера поддержки IOMMU drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c ядра операционных систем Android связана с недостаточной проверкой входных данных при обработке идентификаторов SID. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to untrusted library loading due to the GNU C library (CVE-2025-4802)
Summary The GNU C library is used by DataStage on Cloud Pak for Data as part of general processing. Vulnerability Details CVEID:CVE-2025-4802 DESCRIPTION: Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of...
usb: typec: altmodes/displayport: do not index invalid pin_assignments
...
usb: typec: displayport: Fix potential deadlock
...
Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.
...