28 matches found
DEBIAN-CVE-2026-33079
In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS Regular Expression Denial of Service vulnerability in LINKTITLERE that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular expression used for parsing link titles contains overlapping...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in responding to symbolic link parsing, resulting in out-of-bound read operations due to...
Important: containerd
Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...
TP-Link VX800v security vulnerability
The TP-Link VX800v is a VoIP gateway produced by the TP-Link company. The TP-Link VX800v 1.0 version has a security vulnerability. This vulnerability stems from improper parsing of SFTP service links, which may allow authenticated neighboring attackers to access system files using specially craft...
EUVD-2017-1375
Malware in sbrugna...
CVE-2025-20268
A vulnerability in the Geolocation-Based Remote Access RA VPN feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This vulnerability exists becaus...
OESA-2025-1719 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...
firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed website security...
firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed website security...
firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed website security...
DENX Software Engineering Das U-Boot 安全漏洞
DENX Software Engineering Das U-Boot is a Universal Bootloader from DENX Software Engineering, Germany. A security vulnerability exists in versions prior to DENX Software Engineering Das U-Boot 2025.01-rc1, which stems from an integer overflow in symbolic link parsing that results in a memory...
DENX Software Engineering Das U-Boot 安全漏洞
DENX Software Engineering Das U-Boot is a Universal Bootloader from DENX Software Engineering, Germany. A security vulnerability exists in versions prior to DENX Software Engineering Das U-Boot 2025.01-rc1, which stems from an integer overflow in ext4 symbolic link parsing that results in a memor...
Zoom Workplace App for macOS Denial of Service Vulnerability
Zoom Workplace App for macOS is a video conferencing software designed for macOS, aiming to provide a stable and efficient remote collaboration experience. A denial of service vulnerability exists in Zoom Workplace App for macOS, which stems from improper link parsing when the installer handles...
Zoom Workplace 安全漏洞
Zoom Workplace App for macOS is a video conferencing software designed for macOS, aiming to provide a stable and efficient remote collaboration experience. A denial of service vulnerability exists in Zoom Workplace App for macOS, which stems from improper link parsing when the installer handles...
Trend Micro Security 安全漏洞
Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security versions prior to 17.7.1979, which stems from incorrect link parsing that could lead to file deletion...
UBUNTU-CVE-2024-31951
In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs lengths are not validated...
Remote Code Execution(RCE)
Nteract is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a lack of input validation in the Markdown link parsing functionality, allowing malicious actors to execute arbitrary code remotely...
Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
Showdownjs, versions = 2.1.0, anchors subparser used to parse links has a nested regular expression which can lead to denial of service conditions given malicious input...
Measuresoft ScadaPro Server and Client 后置链接漏洞
Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. Measuresoft ScadaPro Server and Client suffers from a backlink vulnerability that stems fr...
MediaTek 多款产品后置链接漏洞
MediaTek Mt Series is a series of smartphone chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in several MediaTek products, which stems from incorrect link parsing in connsyslogger, which may result in symbolic links. The following products and versions are...