26 matches found
MAL-2025-35829 Malicious code in test-mlw2-murky-daman (npm)
The package test-mlw2-murky-daman was found to contain malicious code...
CVE-2020-35829
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30,...
Linux Distros Unpatched Vulnerability : CVE-2023-35829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdecremove in drivers/staging/media/rkvdec/rkvdec.c. CVE-2023-35829 No...
CVE-2024-35829
creationtimestamp| type| source ---|---|--- 2025-01-23 22:03:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2843...
DEBIAN-CVE-2024-35829
In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in limaheapalloc When limavmmapbo fails, the resources need to be deallocated, or there will be memleaks...
CVE-2024-35829 drm/lima: fix a memleak in lima_heap_alloc
In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in limaheapalloc When limavmmapbo fails, the resources need to be deallocated, or there will be memleaks...
BELL-CVE-2023-35829 CVE-2023-35829 does not affect BellSoft software
Bulletin has no description...
CVE-2023-35829 affecting package kernel for versions less than 5.15.118.1-2
CVE-2023-35829 affecting package kernel for versions less than 5.15.118.1-2. A patched version of the package is available...
CVE-2023-35829 affecting package kernel 5.10.183.1-1
CVE-2023-35829 affecting package kernel 5.10.183.1-1. A patched version of the package is available...
Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to Malware
In a sign that cybersecurity researchers continue to be under the radar of malicious actors, a proof-of-concept PoC has been discovered on GitHub, concealing a backdoor with a "crafty" persistence method. "In this instance, the PoC is a wolf in sheep's clothing, harboring malicious intent under t...
SUSE-SU-2023:2820-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter tcindex bsc1210335. - CVE-2023-3389: Fixed a use-after-free vulnerability in the...
CVE-2023-35829
creationtimestamp| type| source ---|---|--- 2023-07-03 13:25:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4673 2023-07-03 13:37:17+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4674 2023-07-04 17:21:31+00:00| published-proof-of-concept|...
CVE-2023-35829
A race condition was found in the Linux kernel's rkvdec driver when removing the module before cleanup in the rkvdecremove function. This can result in a use-after-free issue, possibly leading to a system crash or other undefined behaviors...
Mageia: Security Advisory (MGASA-2023-0201)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-35829
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdecremove in drivers/staging/media/rkvdec/rkvdec.c...
CVE-2023-35829
Affected software: Linux kernel (before 6.3.2). Vulnerability: a use-after-free in rkvdec_remove() in drivers/staging/media/rkvdec/rkvdec.c. Impact: local attacker could exploit a UAF to crash or potentially escalate privileges (as per CVSS high). Root cause: use-after-free in rkvdec_remove. Affe...
Azure Service Fabric Explorer Spoofing (Oct 2022)
The Azure Service Fabric installed on the remote host is affected by a spoofing vulnerability. A remote, authenticated attacker can exploit this to compromise confidentiality. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
CVE-2022-35829
creationtimestamp| type| source ---|---|--- 2022-10-19 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/10/awareness-and-guidance-related-to-potential-service-fabric-explorer-sfx-v1-web-client-risk/ 2023-01-05 21:55:21+00:00| published-proof-of-concept| https://t.me/RESOLUTEATTACK/316...
Vulnerabilities fixed in Microsoft Azure
Vulnerabilities have been fixed in Microsoft Azure. The vulnerabilities allow a malicious party to obtain elevated privileges obtain or to impersonate another user. The vulnerability with attribute CVE-2022-37968 has a CVSS of 10.0. If an unauthenticated malicious person uses the randomly generat...
