10311 matches found
PT-2025-37242
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s drm/hisilicon/hibmc subsystem related to the irq request function. A local variable intended for the interrupt request IRQ name was being passed to...
CVE-2025-59052 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...
CVE-2025-59052
CVE-2025-59052: Angular SSR race condition in the platform injector can cause cross-request data leaks due to a global injector state shared across concurrent SSR requests. Affected: Angular SSR/server rendering path using bootstrapApplication, getPlatform, or destroyPlatform. Patched in all acti...
CVE-2025-59052 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container the "platform injector" to hold request-specific state during server-side rendering. For historical reasons, the container was stored as ...
Linux Distros Unpatched Vulnerability : CVE-2024-25165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. CVE-2024-25165 Note that Nessus relies o...
PT-2025-37099
Name of the Vulnerable Software and Affected Versions: Angular versions 18.2.14 through 18.2.21 Angular versions 19.2.15 through 19.2.16 Angular versions 20.3.0 Angular versions 21.0.0-next.3 Description: Angular uses a DI container to hold request-specific state during server-side rendering. Due...
Angular 竞争条件问题漏洞
Angular is a development platform of Angular open source. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. Angular suffers from a Competing Conditions Issue vulnerability that stems from the possibility that DI containers may share or...
Linux Distros Unpatched Vulnerability : CVE-2024-28832
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 EOL allows users with permission to change Global Settings...
Linux Distros Unpatched Vulnerability : CVE-2024-22912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...
Linux Distros Unpatched Vulnerability : CVE-2024-22919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587. CVE-2024-22919 Note...
Linux Distros Unpatched Vulnerability : CVE-2022-31187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licens...
A Decade-Long Landscape of Advanced Persistent Threats: Longitudinal Analysis and Global Trends
An advanced persistent threat APT refers to a covert, long-term cyberattack, typically conducted by state-sponsored actors, targeting critical sectors and often remaining undetected for long periods. In response, collective intelligence from around the globe collaborates to identify and trace...
Network-Level Censorship Attacks in the InterPlanetary File System
The InterPlanetary File System IPFS has been successfully established as the de facto standard for decentralized data storage in the emerging Web3. Despite its decentralized nature, IPFS nodes, as well as IPFS content providers, have converged to centralization in large public clouds...
gfs2: Validate i_depth for exhash directories
...
Malicious code in zenith-kaus-global-dendrochronology (npm)
The package zenith-kaus-global-dendrochronology was found to contain malicious code...
MAL-2025-44441 Malicious code in global-xerxes-quark-cosmicray (npm)
The package global-xerxes-quark-cosmicray was found to contain malicious code...
Malicious code in optimize-css-assets-webpack-plugin-fornax-global-markdownlint (npm)
The package optimize-css-assets-webpack-plugin-fornax-global-markdownlint was found to contain malicious code...
Malicious code in winston-global-proxima-metalsmith (npm)
The package winston-global-proxima-metalsmith was found to contain malicious code...