Important: squid

Issue Overview: Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. CVE-2025-59362 Affected Packages: squid Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2...

Vlang-Pentest-Framework

🔥 Vlang Pentest Framework ██╗ ██╗██████╗ ███████╗███╗...

Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.2 released 2025-10-07 includes security fixes to the archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem, net/http, net/mail, net/textproto, and net/url packages, as well as bug fixes to the compiler, the runtime, and the...

SUSE-SU-2025:03547-1 Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.2 released 2025-10-07 includes security fixes to the archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem, net/http, net/mail, net/textproto, and net/url packages, as well as bug fixes to the compiler, the runtime, and the...

CVE-2025-61912 python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

CVE-2025-27049

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-47341

memory corruption while processing an image encoding completion event...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : ImageMagick vulnerabilities (USN-7812-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7812-1 advisory. Woojin Park, Hojun Lee, Yougin Won and Siyeon Han discovered that ImageMagick did not properl...

Cherry Studio 代码注入漏洞

Cherry Studio is a multi-model AI assistant from China's Thousand Comets Cherry Studio. A code injection vulnerability exists in Cherry Studio, which stems from the direct execution of commands in base64-encoded configuration data when processing URLs of type cherrystudio://mcp, which could lead ...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796 Vulnerability Details CVEID:CVE-2021-32796 DESCRIPTION: xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParse...

CVE-2025-47341

memory corruption while processing an image encoding completion event...

CVE-2025-27049

Transient DOS while processing IOCTL call for image encoding...

EUVD-2025-33239

memory corruption while processing an image encoding completion event...

CVE-2025-47341

CVE-2025-47341 describes a memory corruption issue in Qualcomm chipsets triggered while processing an image encoding completion event. Affected component is tied to image encoding handling; underlying root cause is memory handling during completion processing. The CVE is tracked with high severit...

CVE-2025-47341 Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event...

CVE-2025-47341 Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event...

CVE-2025-27049 Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding...

EUVD-2025-33246

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-27049

CVE-2025-27049 affects Qualcomm chipsets. The vulnerability is described as a transient denial of service when processing an IOCTL call for image encoding, with a MEDIUM base CVSSv3.1 score (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) and a HIGH impact on availability. Connected documents corroborate a ...

CVE-2025-27049 Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding...