MAL-2025-35841 Malicious code in test-mlw2-nanna-rybat (npm)

The package test-mlw2-nanna-rybat was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-35841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: tls, fix WARNIING in skmsgfree A splice with MSGSPLICEPAGES will cause tls code to use...

CVE-2023-35841

creationtimestamp| type| source ---|---|--- 2025-07-28 21:40:29+00:00| seen| Telegram/ouY7NureMRrxMxj150BAa7IY4HZQnZW-eDRd8km-69xyCk8...

CVE-2023-35841

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

CVE-2020-35841

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2024-35841 net: tls, fix WARNIING in __sk_msg_free

In the Linux kernel, the following vulnerability has been resolved: net: tls, fix WARNIING in skmsgfree A splice with MSGSPLICEPAGES will cause tls code to use the tlsswsendmsgsplice path in the TLS sendmsg code to move the user provided pages from the msg into the msgpl. This will loop over the...

CVE-2024-35841

CVE-2024-35841 describes a Linux kernel vulnerability in the TLS path (net: tls) related to splice handling with MSG_SPLICE_PAGES. The issue occurs when moving user pages from msg to msg_pl; if more pages are added than MAX_MSG_FRAGS and the MORE flag is used, the code can attempt to re-fill a fu...

CVE-2024-35841 net: tls, fix WARNIING in __sk_msg_free

In the Linux kernel, the following vulnerability has been resolved: net: tls, fix WARNIING in skmsgfree A splice with MSGSPLICEPAGES will cause tls code to use the tlsswsendmsgsplice path in the TLS sendmsg code to move the user provided pages from the msg into the msgpl. This will loop over the...

CVE-2023-35841

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

CVE-2023-35841 WinFlash Driver Permissions Issue

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

CVE-2023-35841 WinFlash Driver Permissions Issue

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL

Overview Some of the Windows kernel drivers provided by Phoenix Technologies Inc. is vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-35841. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...

MS Enterprise app management service RCE. CVE-2022-35841

TL;DR A remote command execution and local privilege escalation vulnerability has been fixed by Microsoft as part of September’s patch Tuesday. The vulnerability, filed under CVE-2022-35841, affects the Enterprise App Management Service which handles the installation of enterprise applications...

CVE-2022-35841

creationtimestamp| type| source ---|---|--- 2022-09-13 22:25:52+00:00| seen| https://t.me/cibsecurity/49691...

CVE-2022-35841

Windows Enterprise App Management Service Remote Code Execution Vulnerability...

CVE-2022-35841

Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.

CVE-2020-35841

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2020-35841

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2020-35841

CVE-2020-35841 is a stored XSS vulnerability in NETGEAR devices. Affected are D6200 < 1.1.00.38, D7000 < 1.0.1.78, JNR1010v2 < 1.1.0.62, JR6150 < 1.0.1.24, JWNR2010v5 < 1.1.0.62, R6020 < 1.0.0.42, R6050 < 1.0.1.24, R6080 < 1.0.0.42, R6120 < 1.0.0.66, R6220 < 1.1.0.10...

ebesucher.de XSS vulnerability

Vulnerable URL: https://www.ebesucher.de/anmelden Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35841 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted...