9077 matches found
CVE-2025-39728 clk: samsung: Fix UBSAN panic in samsung_clk_init()
In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsungclkinit With UBSANARRAYBOUNDS=y, I'm hitting the below panic due to dereferencing ctx-clkdata.hws before setting ctx-clkdata.num = nrclks. Move that up to fix the crash. UBSAN: array index...
CVE-2025-2950: Improper Neutralization of HTTP Headers for Scripting Syntax
IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to change domain/IP address which may lead to unexpected behavior...
Care what you share
Welcome to this week's edition of the Threat Source newsletter. As we navigate our daily routines, certain tasks become second nature to us, especially if they are integral to our professions. However, what feels instinctive to one person might be foreign to another. This disparity is akin to a...
CVE-2025-22044
In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in tonfitbusuuid: "only secondary bus families can be translated". This warning is emited if the argument is equal to NVDIMMBUSFAMILYNFIT == 0...
CVE-2025-22048
The CVE-2025-22048 entry concerns LoongArch support in the Linux kernel where BPF return-value handling was fixed. The root cause was that after a commit that sign-extended the a5 return register to a0, the subsequent propagation from a0 back to a5 occurred for all function calls, which was incor...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ext4 attempting to update the superblock even after log destruction, which could lead to undefined behavior...
CVE-2025-22044: Incorrect Type Conversion or Cast
In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in tonfitbusuuid: "only secondary bus families can be translated". This warning is emited if the argument is equal to NVDIMMBUSFAMILYNFIT == 0...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from cfg80211 not initializing wiphywork before rfkill allocation fails, which could lead to undefined behavior...
freetype2:truetype-render-i38: Crash in af_face_globals_free
Detailed Report: https://oss-fuzz.com/testcase?key=5065982865637376 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: truetype-render-i38 Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5ab044000000 Crash State: affaceglobalsfree destroyface...
Clustering and Analysis of User Behaviour in Blockchain: a Case Study of Planet IX
Decentralised applications dApps that run on public blockchains have the benefit of trustworthiness and transparency as every activity that happens on the blockchain can be publicly traced through the transaction data. However, this introduces a potential privacy problem as this data can be track...
glibc: buffer overflow in the GNU C Library's assert()
A flaw was found in the GNU C Library glibc. A buffer overflow condition via the assert function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading t...
CVE-2025-0129
An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions...
Incorrect Behavior Order: Early Validation
Overview lockfile-lint-api is a Lint an npm or yarn lockfile to analyze and detect issues Affected versions of this package are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name...
CVE-2024-58136
Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025...
CVE-2025-0129
CVE-2025-0129 relates to Palo Alto Networks Prisma Access Browser and describes an improper exception check that lets a low-privileged user bypass Policy Rules, enabling unrestricted use of the browser. The vulnerability affects Prisma Access Browser; the underlying cause is an improper exception...
Palo Alto Networks Prisma Access Browser 安全漏洞
Palo Alto Networks Prisma Access Browser is an enterprise security browser from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Prisma Access Browser that stems from improper control behavior...
CVE-2025-31475
tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the addOrUpdate function, used for applying custom texts, did not properly validate input. This allowed an attacker with direct access to the site's source code ...
GHSA-GGWG-CMWP-46R5 yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key
Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025...
yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key
Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025...