Linux Distros Unpatched Vulnerability : CVE-2021-27845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c CVE-2021-27845 Note that Nessus relies on the...

Advisory ROSA-SA-2025-2963

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 3.0 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv30 affected versions xmlrpc-c-1.51.0-11.0.1.rv30 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a...

Advisory ROSA-SA-2025-2958

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 2.1 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv3 affected versions xmlrpc-c-1.51.0-11.0.1.rv3 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a stack-bas...

iExec brings TEE-based privacy tools to Arbitrum

Paris, France, 2025 - iExec has announced the deployment of its privacy framework on Arbitrum, enabling the creation…...

CWEXploit

This is a PoC Proof of Concept exploit for various CWE Common...

sslscan

This is a tool for scanning SSL/TLS protocols and ciphers on a target server. The tool is called sslscan and is written in C. It is designed to be a command-line interface for scanning SSL/TLS protocols and ciphers on a target server. The tool can be built on various platforms, including Linux an...

Exploit for Out-of-bounds Write in Gnu Glibc

PoC exploit for CVE-2015-0235, a vulnerability in the gethostbyname2r and gethostbynamer functions of the glibc library. The exploit is a shared library wrapper that provides an additional check for the vulnerable functions, preventing them from being called. The target is the glibc library,...

Malicious code in tansuo-c-gaoji-texing (npm)

The package tansuo-c-gaoji-texing was found to contain malicious code...

Malicious code in @zalastax/nolb-passport-c (npm)

The package @zalastax/nolb-passport-c was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-c (npm)

The package @zalastax/nolb-lion-c was found to contain malicious code...

MAL-2025-46237 Malicious code in tansuo-c-gaoji-texing (npm)

The package tansuo-c-gaoji-texing was found to contain malicious code...

Malicious code in @zalastax/nolb-async-c (npm)

The package @zalastax/nolb-async-c was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-c (npm)

The package @zalastax/nolb-lion-lib-c was found to contain malicious code...

MAL-2025-43133 Malicious code in @zalastax/nolb-async-c (npm)

The package @zalastax/nolb-async-c was found to contain malicious code...

MAL-2025-43312 Malicious code in @zalastax/nolb-lion-c (npm)

The package @zalastax/nolb-lion-c was found to contain malicious code...

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations

The threat actor behind the malware-as-a-service MaaS framework and loader called CastleLoader has also developed a remote access trojan known as CastleRAT. "Available in both Python and C variants, CastleRAT's core functionality consists of collecting system information, downloading and executin...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to untrusted library loading due to the GNU C library (CVE-2025-4802)

Summary The GNU C library is used by DataStage on Cloud Pak for Data as part of general processing. Vulnerability Details CVEID:CVE-2025-4802 DESCRIPTION: Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of...

usb: typec: altmodes/displayport: do not index invalid pin_assignments

...

usb: typec: displayport: Fix potential deadlock

...

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

...