588 matches found
Siemens SIMATIC and SCALANCE Improper Access Control (CVE-2025-1390)
The PAM module pamcap.so of libcap configuration supports group names starting with @, during actual parsing, configurations not starting with @ are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to securi...
Malicious code in nokire-loklok90 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4594522355e4ed524442bd0a7204b6f4509d182a00f9b6689c12645ee3533a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MGASA-2025-0242 Updated haproxy packages fix security vulnerability & bugs
Haproxy has a critical, a major, few medium and few minor bugs fixed in the last upstream version 2.8.16 of branch 2.8. Fixed critical bug list: - mjson: fix possible DoS when parsing numbers Fixed major bug list: - listeners: transfer connection accounting when switching listeners Fixed medium...
CVE-2025-57521
Bambu Studio 2.1.1.52 and earlier is affected by a vulnerability that allows arbitrary code execution during application startup. The application loads a network plugin without validating its digital signature or verifying its authenticity. A local attacker can exploit this behavior by placing a...
AZL-68525 CVE-2025-39977 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI syzbot managed to trigger the following race: T1 T2 futexwaitrequeuepi futexdowait schedule futexrequeue futexproxytrylockatomic futexrequeuepiprepare requeuepiwakefutex...
CVE-2025-39977 futex: Prevent use-after-free during requeue-PI
In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI syzbot managed to trigger the following race: T1 T2 futexwaitrequeuepi futexdowait schedule futexrequeue futexproxytrylockatomic futexrequeuepiprepare requeuepiwakefutex...
[SECURITY] Fedora 41 Update: log4cxx-1.5.0-1.fc41
Log4cxx is a popular logging package written in C++. One of its distinctive features is the notion of inheritance in loggers. Using a logger hierarchy it is possible to control which log statements are output at arbitrary granularity. This helps reduce the volume of logged output and minimize the...
i-Educar 安全漏洞
i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.9.10 and earlier, which stems from improper privilege inheritance in the user type handling component in the file app/Http/Controllers/AccessLevelController.php, which could...
EUVD-2020-21849
Malware in sbrugna...
EUVD-2014-9321
Malware in sbrugna...
EUVD-2003-1565
Malware in sbrugna...
EUVD-2016-3124
Malware in sbrugna...
EUVD-2010-0653
Malware in sbrugna...
EUVD-2006-6624
Malware in sbrugna...
EUVD-2015-1395
Malware in sbrugna...
EUVD-2021-30008
Malicious code in bioql PyPI...
EUVD-2024-43211
Malicious code in bioql PyPI...
EUVD-2022-41056
Malicious code in bioql PyPI...