Lucene search
K

6692 matches found

Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.2 views

PT-2025-53757

Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description An issue exists in the d unqualified name function within the cp-demangle.c file of BinUtils. This can lead to a denial of service through the processing of specially crafted Portable Executable PE files...

6.6AI score0.00023EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/29 12:0 a.m.22 views

CVE-2025-66866

An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

0.00019EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2025/12/29 12:0 a.m.1 views

CVE-2025-66864

An issue was discovered in function dprintcompinner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

6.3AI score0.00067EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.3 views

PT-2025-53758

Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description A buffer overflow issue exists in the gnu special function within the cplus-dem.c file. This can lead to a denial of service through the processing of specially crafted PE files. Recommendations Update to a...

7.5CVSS7AI score0.00086EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2025/12/29 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-66866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS6.1AI score0.00019EPSS
Exploits2References4
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.2 views

GNU BinUtils 安全漏洞

GNU BinUtils is a collection of programming tools for working with binary files from the US GNU community. A security vulnerability exists in GNU BinUtils version 2.26, which stems from the improper handling of specially crafted PE files by the dprintcompinner function in the cp-demangle.c file,...

7.5CVSS6.4AI score0.00117EPSS
Exploits1References2
CVE
CVE
added 2025/12/29 12:0 a.m.18 views

CVE-2025-66862

CVE-2025-66862 affects GNU Binutils 2.26, with a buffer overflow in gnu_special (cplus-dem.c) that can cause a denial-of-service via a crafted PE file. The issue can trigger a heap-based buffer over-read and terminate affected processes. CVSS v3.1 base score 7.5 (HIGH). Connected advisories ident...

7.5CVSS6.7AI score0.00086EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.1 views

GNU BinUtils 安全漏洞

GNU BinUtils is a collection of programming tools for working with binary files from the US GNU community. A security vulnerability exists in GNU BinUtils version 2.26, which stems from the improper handling of specially crafted PE files by the dunqualifiedname function in the cp-demangle.c file,...

2.5CVSS6AI score0.00023EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/12/29 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-66865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in function dprintcompinner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS6.1AI score0.00117EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/29 12:0 a.m.2 views

CVE-2025-66865

An issue was discovered in function dprintcompinner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

6.3AI score0.00117EPSS
Exploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/28 7:49 p.m.4 views

Malicious code in cryptozip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 157ea6b1f1c3d4ed5564c494db770e9156f3e269f12cefec6e4270085a762f26 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.3AI score
Exploits0References4
OSV
OSV
added 2025/12/27 9:41 a.m.3 views

MAL-2025-192948 Malicious code in extrazip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.2AI score
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/27 9:41 a.m.5 views

Malicious code in extrazip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.3AI score
Exploits0References4
OSV
OSV
added 2025/12/25 10:16 a.m.2 views

CLSA-2025-1766657780 Fix CVE(s): CVE-2025-1181

SECURITY UPDATE: memory corruption when processing relocations for ELF files - debian/patches/CVE-2025-1181.patch: prevent illegal memory access when checking relocs in a corrupt ELF binary - CVE-2025-1181...

5.1CVSS6.4AI score0.00117EPSS
Exploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/24 10:45 p.m.5 views

Malicious code in envtoolsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8718f9207ffeca355720b0d4a59cc778fabe7879fc354837d655affac6a82321 Importing the module, downloads and starts a malicious executable identified as infostealer. Based on Telegram links, this is related to the 2025-12-synium...

7AI score
Exploits0References3
OSV
OSV
added 2025/12/24 10:45 p.m.1 views

MAL-2025-192929 Malicious code in envtoolsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8718f9207ffeca355720b0d4a59cc778fabe7879fc354837d655affac6a82321 Importing the module, downloads and starts a malicious executable identified as infostealer. Based on Telegram links, this is related to the 2025-12-synium...

7AI score
Exploits0References3
NVD
NVD
added 2025/12/24 8:15 p.m.1 views

CVE-2019-25245

Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a...

8.8CVSS0.00037EPSS
Exploits1References3
CVE
CVE
added 2025/12/24 7:27 p.m.7 views

CVE-2019-25245

Ross Video DashBoard 8.5.1 has an elevation-of-privileges vulnerability where authenticated users can replace the DashBoard.exe binary due to improper permissions. The issue arises from the ability of the M/C flags for the Authenticated Users group to modify executables, enabling a local attacker...

8.8CVSS6.3AI score0.00037EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/24 7:27 p.m.2 views

CVE-2019-25245 Ross Video DashBoard 8.5.1 Privilege Escalation via Insecure Permissions

Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a...

8.8CVSS6.3AI score0.00037EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/12/24 7:27 p.m.20 views

CVE-2019-25245 Ross Video DashBoard 8.5.1 Privilege Escalation via Insecure Permissions

Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a...

8.8CVSS0.00037EPSS
Exploits1References3
Rows per page
Query Builder