MAL-2025-16675 Malicious code in cb-serverless-plugins (npm)

The package cb-serverless-plugins was found to contain malicious code...

MAL-2025-12651 Malicious code in @zalastax/nolb-node-red-cb (npm)

The package @zalastax/nolb-node-red-cb was found to contain malicious code...

Malicious code in cb-serverless-plugins (npm)

The package cb-serverless-plugins was found to contain malicious code...

MAL-2025-16673 Malicious code in cb-components (npm)

The package cb-components was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-cb (npm)

The package @zalastax/nolb-node-red-cb was found to contain malicious code...

MAL-2025-12599 Malicious code in @zalastax/nolb-node-cb (npm)

The package @zalastax/nolb-node-cb was found to contain malicious code...

Malicious code in cb-iva-react-web-ui (npm)

The package cb-iva-react-web-ui was found to contain malicious code...

Malicious code in cb-components (npm)

The package cb-components was found to contain malicious code...

SUSE CVE-2022-50163

In the Linux kernel, the following vulnerability has been resolved: ax25: fix incorrect devtracker usage While investigating a separate rose issue 1, and enabling CONFIGNETDEVREFCNTTRACKER=y, Bernard reported an orthogonal ax25 issue 2 An ax25dev can be used by one or many struct ax25cb. We thus...

SUSE CVE-2025-38048

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...

CVE-2023-22653

An OS command injection vulnerability exists in the vtyshubus tcpdumpstartcb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger this vulnerability...

CVE-2025-25951: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information...

SUSE CVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

UBUNTU-CVE-2024-56546

In the Linux kernel, the following vulnerability has been resolved: drivers: soc: xilinx: add the missing kfree in xlnxaddcbforsuspend If we fail to allocate memory for cbdata by kmalloc, the memory allocation for evedata is never freed, add the missing kfree in the error handling path...

MAL-2024-10711 Malicious code in cb-cookie-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e21db163fcf5bd372c2a214576f2018fdca3221ae4ca1a4ed936a02d013c782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability that stems from a lack of bounds checking in smsExtractCbLanguage in smsCellBroadcast.c, which can be exploited by an attacker to cause an out-of-bounds read...

CVE-2022-49017 tipc: re-fetch skb cb after tipc_msg_validate

In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipcmsgvalidate As the call trace shows, the original skb was freed in tipcmsgvalidate, and dereferencing the old skb cb would cause an use-after-free crash. BUG: KASAN: use-after-free in...

CVE-2022-49017

CVE-2022-49017 (Linux kernel) : A use-after-free in Tipc processing was mitigated by re-fetching the skb control block from the newly allocated skb after tipc_msg_validate(), preventing dereferencing a freed skb. The issue manifested as a KASAN use-after-free in tipc_crypto_rcv_complete and relat...

UBUNTU-CVE-2024-49938

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly ju...

CVE-2024-49938 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly ju...