781 matches found
MAL-2025-192776 Malicious code in elf-stats-mistletoe-cookie-256 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0939dc9a926166c269a6958a4137526888403f1b61f90b51b1eb27e64f06ecd The package elf-stats-mistletoe-cookie-256 was found to contain malicious code...
Malicious code in elf-stats-mistletoe-cookie-256 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0939dc9a926166c269a6958a4137526888403f1b61f90b51b1eb27e64f06ecd The package elf-stats-mistletoe-cookie-256 was found to contain malicious code...
EUVD-2025-204899
Malicious code in elf-stats-mistletoe-cookie-256 npm...
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
...
SUSE CVE-2025-14104
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...
CVE-2025-14104 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...
CVE-2025-14104 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...
CVE-2025-14104
CVE-2025-14104 concerns a heap buffer overread in util-linux's setpwnam() when processing 256-byte usernames, affecting SUID login-utils that write to the password database. The vulnerability is exploitable locally with low privileges and can impact availability (high) and confidentiality (low); ...
util-linux 缓冲区错误漏洞
util-linux is an open source package for util-linux. A buffer error vulnerability exists in util-linux that stems from an over-read of the heap buffer when processing a 256-byte username, which could lead to security issues with the SUID login tool...
[SECURITY] Fedora 43 Update: 7zip-25.01-1.fc43
7-Zip is a file archiver with a high compression ratio. The main features of 7-Zip are: High compression ratio in 7z format with LZMA and LZMA2 compression Supported formats: Packing / unpacking: 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM Unpacking only: AR, ARJ, CAB, CHM, CPIO, CramFS, DMG, EXT, FAT,...
CVE-2025-60695
A stack-based buffer overflow vulnerability exists in the mtkdut binary of Linksys E7350 routers Firmware 1.1.00.032. The function sub4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990738)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990738 advisory. In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof vs ARRAYSIZE bug The buf pointer is an array of u16 values. This code should ...
Astra Linux - уязвимость в curl
libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...
EUVD-2009-3262
Malware in sbrugna...
EUVD-2018-2913
Malware in sbrugna...
EUVD-2020-4212
Malware in sbrugna...
EUVD-2018-19357
Malware in sbrugna...
EUVD-2020-26025
Malware in sbrugna...