1809 matches found
CVE-2025-13823 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-13823 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-13823
CVE-2025-13823 affects Rockwell Automation Micro850 and Micro870 controllers in their IPv6 stack. When receiving multiple malformed packets during fuzzing, the controllers enter a recoverable fault with fault code 0xFE60. To recover, the fault must be cleared. Several connected advisories corrobo...
PT-2025-51237
Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description A security issue arises from improper handling of malformed CIP packets during fuzzing. This causes the controller to enter a hard fault, indicated by a solid red Fault LED and...
PT-2025-51236
Name of the Vulnerable Software and Affected Versions Micro850 and Micro870 controllers affected versions not specified Description An issue exists in the IPv6 stack of the Micro850 and Micro870 controllers. The controllers may enter a recoverable fault state fault code 0xFE60 when receiving...
CVE-2025-13823: Dependency on Vulnerable Third-Party Component
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
SqlScanner
SqlScanner SQL Injection Scanner deve...
EUVD-2022-55717
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...
CVE-2022-50639
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...
DEBIAN-CVE-2022-50639
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...
CVE-2022-50639
CVE-2022-50639 describes a Linux kernel issue where, during io-wq worker creation, a CPU mask allocation failure could leak memory from the io_wqe structure if not yet added to the wqes array. The available connected sources (Astra Linux, EUVD, OSV, NVD/NIST, etc.) report that this vulnerability ...
CVE-2022-50639
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...
CVE-2023-53761
In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...
Exploit for Deserialization of Untrusted Data in Facebook React
Chain Reaction High-Performance Rust Scanner for React Serv...
kernel: HID: core: Harden s32ton() against conversion to 0 bits
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...
BGPFuzz: Automated Configuration Fuzzing of the Border Gateway Protocol
Telecommunications networks rely on configurations to define routing behavior, especially in the Border Gateway Protocol BGP, where misconfigurations can lead to severe outages and security breaches, as demonstrated by the 2021 Facebook outage. Unlike existing approaches that rely on synthesis or...
PBFuzz: Agentic Directed Fuzzing for PoV Generation
Proof-of-Vulnerability PoV input generation is a critical task in software security and supports downstream applications such as path generation and validation. Generating a PoV input requires solving two sets of constraints: 1 reachability constraints for reaching vulnerable code locations, and ...
ReFuzz: Reusing Tests for Processor Fuzzing with Contextual Bandits
Processor designs rely on iterative modifications and reuse well-established designs. However, this reuse of prior designs also leads to similar vulnerabilities across multiple processors. As processors grow increasingly complex with iterative modifications, efficiently detecting vulnerabilities...
Effective Command-Line Interface Fuzzing with Path-Aware Large Language Model Orchestration
Command-line interface CLI fuzzing tests programs by mutating both command-line options and input file contents, thus enabling discovery of vulnerabilities that only manifest under specific option-input combinations. Prior works of CLI fuzzing face the challenges of generating semantics-rich opti...