4350 matches found
MAL-2025-48085 Malicious code in webpack-loader-css-branch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229ffddcb27b696e6b64ac9e852913efc9cb7db2c9fbe5df5ec27be21dd18080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the bfdelfgcrecordvtentry function. An attacker can cause a denial of service by providing specially crafted input files that trigger an out-of-bounds read during the linking process. Remediation A fix was pushed...
Server-side Request Forgery (SSRF)
Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processrequest function, which processes incoming content URLs without proper validation or sanitization. An attacker can access internal...
CVE-2023-53634
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
UBUNTU-CVE-2023-53634
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
EUVD-2025-32805
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
CVE-2023-53634 bpf, arm64: Fixed a BTI error on returning to patched function
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
CVE-2023-53634
CVE-2023-53634 (bpf, arm64 BTI) : Technical details across multiple feeds show a Linux kernel BTI-related flaw in BPF trampoline handling. When BPF_TRAMP_F_CALL_ORIG is set, trampolines jump back to the patched function via BLR. In BTI-enabled kernels, the instruction after the call site is typic...
CVE-2023-53634
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
Interpretation Conflict
Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict due to improper handling of quoted local-parts containing @. An attacker can cause emails to be sent to unintended...
EUVD-2014-4922
Malware in sbrugna...
EUVD-2017-5810
Malware in sbrugna...
EUVD-2019-6669
Malware in sbrugna...
EUVD-2021-0093
Malware in sbrugna...
EUVD-2018-19098
Malware in sbrugna...
EUVD-2020-5553
Malware in sbrugna...
EUVD-2021-26245
Malware in sbrugna...
EUVD-2017-9174
Malware in sbrugna...