44 matches found
JLSEC-2026-663 libssh2 through 1.11.1 grows its publickey list with `SSH2_REALLOC` but does not zero-initialize new...
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
UBUNTU-CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
EUVD-2026-39971
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
CVE-2026-31886
Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary directory path without any format validation. Go's filepath.Join resolves...
The vulnerability of the nbd_cleanup() function in the drivers/block/nbd.c module of the Linux kernel’s block device support driver allows a hacker to cause a service failure.
The vulnerability of the nbdcleanup function in the drivers/block/nbd.c module of the Linux kernel’s block device support driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
WordPress plugin Advance WP Query Search Filter 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...
WordPress plugin wpForo Forum SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugi...
CVE-2025-62736
Missing Authorization vulnerability in opicron Image Cleanup image-cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Cleanup: from n/a through = 1.9.2...
kernel: workqueue: Put the pwq after detaching the rescuer from the pool
A vulnerability was found in the Linux kernel's work queue subsystem, which manages background task execution. The issue stems from improper handling of the "rescuer" thread during the cleanup of unbound work queues...
EUVD-2021-23668
Malware in sbrugna...
EUVD-2022-28146
Malicious code in bioql PyPI...
EUVD-2023-32785
Malicious code in bioql PyPI...
EUVD-2024-16112
Malicious code in bioql PyPI...
EUVD-2023-2737
Malicious code in bioql PyPI...
WordPress plugin SB Breadcrumbs 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-50000
CVE-2022-50000 affects the Linux kernel netfilter flowtable cleanup. The vulnerability arises when cleaning up the flowtable: if a flow entry already has pending HW stats/add work, the sequence may skip queuing HW del work, causing a stall on teardown and a potential use-after-free during flowtab...
CVE-2023-29184
CVE-2023-29184 describes an incomplete cleanup (CWE-459) vulnerability affecting Fortinet FortiOS and FortiProxy. Affected: FortiOS 7.2 all versions and earlier, and FortiProxy 7.2.0–7.2.2 and before 7.0.8. Exploitation allows a VDOM-privileged attacker to silently add SSH key files via crafted C...