CVE-2025-21231 IP Helper Denial of Service Vulnerability

...

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

IP Helper Denial of Service Vulnerability

...

CVE-2025-21231: Uncontrolled Resource Consumption

IP Helper Denial of Service Vulnerability...

Microsoft IP Helper 资源管理错误漏洞

Microsoft IP Helper is a Microsoft API Application Programming Interface for managing local computer network configurations. A security vulnerability exists in Microsoft IP Helper. An attacker could exploit the vulnerability to cause a denial of service on the system...

PT-2025-1100 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the IP Helper service of Windows operating systems. This can be exploited by a remote attacker to cause a denial of...

CVE-2024-53263: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...

CVE-2024-38691: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Metorik Metorik – Reports & Email Automation for WooCommerce metorik-helper allows Cross Site Request Forgery.This issue affects Metorik – Reports & Email Automation for WooCommerce: from n/a through = 1.7.1...

PT-2026-4360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the tpm2 load cmd function. This function allocates a temporary blob via tpm2 key decode but does not free it in failure scenarios. The issue i...

PT-2025-50588

Name of the Vulnerable Software and Affected Versions smb4k versions prior to 4.0.0-1+deb13u1 Description Two issues were identified in smb4k, a KDE desktop utility used for mounting Samba/CIFS network shares. These issues could lead to a local denial of service or local privilege escalation...

PT-2026-2902

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the drm/tilcdc subsystem related to device removal actions during probe failures. The drm kms helper poll fini and drm atomic helper shutdown...

PT-2026-2890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the BPF subsystem related to handling kfunc calls on LoongArch architecture. Specifically, the issue involves improper sign extension of arguments...

PT-2026-4368

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the Linux kernel’s KVM component related to the gmap helper zap one page function. Missing checks within this function could lead to memory corruption in guest virtual...

DEBIAN-CVE-2024-56668

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix qibatch NULL pointer with nested parent domain The qibatch is allocated when assigning cache tag for a domain. While for nested parent domain, it is missed. Hence, when trying to map pages to the nested parent, NU...

CLSA-2024-1735300286 gnome-shell: Fix of CVE-2024-36472

CVE-2024-36472: fix portal helper from launching automatically based on network responses to prevent loading untrusted JavaScript code...

PT-2025-3651

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A use-after-free vulnerability has been resolved in the Linux kernel. The issue occurs in the drm/mediatek module when mtk drm bind returns an error, and the private-all drm privatei-drm pointe...

Malicious code in rsk-transaction-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234b44f7ae414139d5e5ffe0eebfede48849e6b8336ac262286d71491f03d092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12109 Malicious code in rsk-transaction-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234b44f7ae414139d5e5ffe0eebfede48849e6b8336ac262286d71491f03d092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7166-3 linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

Malware in reftest-helper-for-ae1x

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...