CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

PT-2025-3112

Name of the Vulnerable Software and Affected Versions SUNIX Multi I/O Card version 10.1.0.0 Description An issue in the snxpcamd.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. This enables attackers to manipulate the system, posing...

CVE-2024-55411: Incorrect Permission Assignment for Critical Resource

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

The SUNIX Multi I/O Card version v10.1.0.0 contains a security vulnerability in the snxpcamd.sys component. This flaw allows an attacker to perform arbitrary read and write actions by supplying specially crafted IOCTL requests . This issue is associated with CWE-732 (Incorrect Permission Assignme...

SUNIX Multi I/O Card 安全漏洞

SUNIX Multi I/O Card is a controller from SUNIX Technology China. A security vulnerability exists in SUNIX Multi I/O Card version v10.1.0.0. An attacker can exploit this vulnerability to perform arbitrary read and write operations via specially crafted IOCTL requests...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

AZL-55073 CVE-2025-21614 affecting package cri-o 1.30.1-1

go-git is a highly extensible git implementation library written in pure Go. A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git serve...

AZL-55106 CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-14

go-git is a highly extensible git implementation library written in pure Go. A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git serve...

AZL-55088 CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

AZL-55067 CVE-2025-21613 affecting package cri-o 1.30.1-1

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

PT-2025-32537 · Unknown +1 · Nasm Netwide Assember +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assember version 2.17rc0 Description: A heap-based buffer overflow exists in the macho no dead strip function within the outmacho.c file. Local access is required for exploitation. The exploit for this issue has been publicly...

SUSE CVE-2024-53166

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfqlimitdepth Set new allocated bfqq to bic or remove freed bfqq from bic are both protected by bfqd-lock, however bfqlimitdepth is deferencing bfqq from bic without the lock, this can lead to UAF if t...

UBUNTU-CVE-2024-53196

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't retire aborted MMIO instruction Returning an abort to the guest for an unsupported MMIO access is a documented feature of the KVM UAPI. Nevertheless, it's clear that this plumbing has seen limited testing, since...

UBUNTU-CVE-2024-53214

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability i.e., capability with ID greater than PCIEXTCAPIDM...

CVE-2024-53235 erofs: fix file-backed mounts over FUSE

In the Linux kernel, the following vulnerability has been resolved: erofs: fix file-backed mounts over FUSE syzbot reported a null-ptr-deref in fusereadargsfill: fusereadfolio+0xb0/0x100 fs/fuse/file.c:905 filemapreadfolio+0xc6/0x2a0 mm/filemap.c:2367 doreadcachefolio+0x263/0x5c0 mm/filemap.c:382...

Malicious code in o-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06086385d6d0eae5259f2f99cd6e307f57d5290aa66966c69fb517d502714d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12012 Malicious code in o-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06086385d6d0eae5259f2f99cd6e307f57d5290aa66966c69fb517d502714d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12626: Improper Neutralization of Input During Web Page Generation

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘a-0-o-searchfieldvalue’ parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitizatio...

PT-2024-17678 · WordPress · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP – Automator plugin for WordPress versions up to, and including, 5.0.9 Description: The AutomatorWP plugin is vulnerable to Reflected Cross-Site Scripting via the a-0-o-search field value parameter due to insufficient input...