3176 matches found
Malicious code in seclab-research-depconf-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 71ecf56c682dd44134d9a4d17fb2ae3d20091681372f89902c84d5dc2533c03d Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
SUSE CVE-2025-38330
In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of bounds access - csdspctlcacheinitmultipleoffsets. The code uses mockcoefftemplate.lengthbytes 4 bytes for register value allocations. But...
PT-2025-28301 · Sap · Sapcar
Name of the Vulnerable Software and Affected Versions: SAPCAR affected versions not specified Description: The issue allows an attacker with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege...
Malicious code in fonafx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9441463f029726ea263225e9b0092d82b049e2d7a4e059becd24f5e23c70a906 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...
CVE-2025-46707
Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU...
CVE-2025-46707
CVE-2025-46707 concerns Imagination Technologies graphics stack (PowerVR-GPU) where software in a Guest VM can override the firmware state and gain access to the GPU. The base CVSS shows it is a local issue with low privileges and no user interaction, scoped to change in confidentiality/integrity...
SUSE CVE-2022-50119
In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsgregisterdeviceoverride rpmsgregisterdeviceoverride need to call putdevice to free vch when driversetoverride fails. Fix this by adding a putdevice to the error path...
DEBIAN-CVE-2022-50119
In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsgregisterdeviceoverride rpmsgregisterdeviceoverride need to call putdevice to free vch when driversetoverride fails. Fix this by adding a putdevice to the error path...
UBUNTU-CVE-2022-50119
In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsgregisterdeviceoverride rpmsgregisterdeviceoverride need to call putdevice to free vch when driversetoverride fails. Fix this by adding a putdevice to the error path...
CVE-2022-50119
In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsgregisterdeviceoverride rpmsgregisterdeviceoverride need to call putdevice to free vch when driversetoverride fails. Fix this by adding a putdevice to the error path...
CVE-2022-50119 rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
In the Linux kernel, the following vulnerability has been resolved: rpmsg: Fix possible refcount leak in rpmsgregisterdeviceoverride rpmsgregisterdeviceoverride need to call putdevice to free vch when driversetoverride fails. Fix this by adding a putdevice to the error path...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from rpmsgregisterdeviceoverride not releasing a device reference, which could lead to a resource leak...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: cdx: A possible UAF Uninitialized Address Fault error in driveroverrideshow has been fixed. A potential UAF issue in the driveroverrideshow function in drivers/cdx/cdx.c has been addressed. The driveroverrideshow function is...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Do not override retval if we have already lost the skb. If we are redirecting the skb, and have not yet called tcfmirredforward, we need to inform the kernel to discard the skb by setting the retcode to SHOT...
SUSE CVE-2025-27818
A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, whic...
CVE-2025-48062 Discourse vulnerable to HTML injection when inviting to topic via email
Discourse is an open-source discussion platform. Prior to version 3.4.4 of the stable branch, version 3.5.0.beta5 of the beta branch, and version 3.5.0.beta6-dev of the tests-passed branch, certain invites via email may result in HTML injection in the email body if the topic title includes HTML...
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.3 bsc1236217: Security fixes: CVE-2025-22873: Fixed os.Root permits access to parent directory bsc1242715 Changelog: go73556 go73555 security: fix CVE-2025-22873 os: Root permits access to parent directory go73082 os: Root.Open...
PT-2025-23221 · Valtimo · Valtimo
Name of the Vulnerable Software and Affected Versions: Valtimo versions 11.0.0.RELEASE through 11.3.3.RELEASE Valtimo versions 12.0.0.RELEASE through 12.12.0.RELEASE Description: The issue allows unauthorized users to list, view, edit, create, or delete objects for which an object-management...
CVE-2025-40672 Privilege Escalation in Panloader.exe
A Privilege Escalation vulnerability has been found in Panloader component v3.24.0.0 by Espiral MS Group. This vulnerability allows any user to override the file panLoad.exe that will be executed by SYSTEM user via a programmed task. This would allow an attacker to obtain administrator permission...
