MAL-2026-7771 Malicious code in hwc3v (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

📄 Throttlestop Kernel Driver 3.0.0.0 Privilege Escalation

Throttlestop Kernel Driver version 3.0.0.0 suffers from a privilege escalation vulnerability. Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation Exploit Details: https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/ Date: 8/12/2025...

Exploit for CVE-2025-7771

No d...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7771-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

CVE-2025-7771 Code Execution / Escalation of Privileges in ThrottleStop

ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke...

CVE-2025-7771 Code Execution / Escalation of Privileges in ThrottleStop

ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke...

CVE-2025-7771

CVE-2025-7771 affects ThrottleStop.sys (v3.0.0.0 and possibly others). The driver exposes two IOCTLs (read/write physical memory) that use MmMapIoSpace with no input validation, enabling a local attacker to map arbitrary physical memory, patch the Windows kernel, and invoke kernel functions with ...

CVE-2024-7771

A vulnerability in the Dockerized version of mintplex-labs/anything-llm latest, digest 1d9452da2b92 allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from...

CVE-2024-7771

A vulnerability in the Dockerized version of mintplex-labs/anything-llm latest, digest 1d9452da2b92 allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from...

CVE-2024-7771

CVE-2024-7771 affects the Dockerized mintplex-labs/anything-llm (latest digest 1d9452da2b92). The issue is in the localWhisper audio transcription path: resampling from 1 Hz to 16000 Hz can quickly exhaust memory, causing the Docker container to be killed by the daemon and leading to a denial of ...

CVE-2024-7771 Denial of Service in mintplex-labs/anything-llm

A vulnerability in the Dockerized version of mintplex-labs/anything-llm latest, digest 1d9452da2b92 allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from...

Important: Red Hat Security Advisory: rh-postgresql10-postgresql security update

An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : rh-postgresql10-postgresql (RHSA-2023:7771)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7771 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in arra...

SUSE CVE-2017-7771

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function...

CVE-2020-7771

Asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function. The vulnerability allows injecting properties into Object.prototype (e.g., proto ), which can lead to hijacking object properties and, in worst cases, DoS or remote code execution depending on the environment. ...

Huawei EulerOS: Security Advisory for graphite2 (EulerOS-SA-2017-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1126)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1127)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-7771

An out of bounds read flaw related to "graphite2::Pass::readPass" has been reported in graphite2. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

CVE-2019-7771

CVE-2019-7771 is an out-of-bounds read vulnerability affecting Adobe Acrobat and Reader versions listed in the source (e.g., 2015.006.30493/95, 2017.011.30138/40, 2019.010.20099/20100 and earlier). Successful exploitation could lead to information disclosure. The Connected documents reference the...