9607 matches found
The vulnerability of the handle_misaligned_load() function in the arch/riscv/kernel/traps_misaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system allows a attacker to access protected information.
The vulnerability of the handlemisalignedload function in the arch/riscv/kernel/trapsmisaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to...
GHSA-5J98-MCP5-4VW2
creationtimestamp| type| source ---|---|--- 2025-12-02 03:16:32+00:00| seen| https://gist.github.com/deepak-chowdry/3da737fb0b4c63ed1bfe586c677e4860 2025-12-07 15:01:49+00:00| seen| https://gist.github.com/pxlvoid/2dee87e481533f31473871df69b485dc...
Metasploit Wrap-Up 11/28/2025
This week, we have added 10 new modules to Metasploit Framework including an SMB to MSSQL relay module, a remote code execution module targeting Fortinet software, additional 32-bit and 64-bit RISC-V payloads, and more. The SMB to MSSQL NTLM relay module allows users to open MSSQL sessions and ru...
CVE-2025-0657 ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drvgen5106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network visibility...
Malicious code in v-plausible (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aed8dcc55b812ae7b489eb98ff12b0714a8b37eb43ef61199484fb4cc93b6c6 The package v-plausible was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199352
Malicious code in v-plausible npm...
EUVD-2025-198451
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through = 2.3.2...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
PT-2025-47765
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through = 2.3.2...
USN-7875-1 linux-oracle vulnerabilities
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...
USN-7875-1: Linux kernel (Oracle) vulnerabilities
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...
CVE-2025-13229
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
R.V.R Elettronica TEX 安全漏洞
The R.V.R Elettronica TEX is an FM transmitter from R.V.R Elettronica, Italy. A security vulnerability exists in the R.V.R Elettronica TEX TEXL-000400 version and TLAN-000400 version, which stems from improper access control and could lead to complete system compromise...
PT-2025-47218
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.175 Description A type confusion issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to potentially exploit heap corruption—a condition where memory allocation in the heap is...
The vulnerability of the ipi_remote_fence_i() function in the arch/riscv/mm/cacheflush.c module on RISC-V architecture processors in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ipiremotefencei function in the arch/riscv/mm/cacheflush.c module on RISC-V architecture processors in Linux operating systems is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the vmbus_add_channel_kobj() function in the drivers/hv/vmbus_drv.c module of the Microsoft Hyper-V guest mode support driver for Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the vmbusaddchannelkobj function in the drivers/hv/vmbusdrv.c module of the Microsoft Hyper-V guest mode support driver for Linux operating systems is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow...
Siemens SIMATIC S7-1500 Deadlock (CVE-2023-52699)
In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A writelock&pointerslock = readlock&pointerslock deadlock bug and a...
EUVD-2025-137768
Malicious code in gocay-uga-agidugafyi npm...