eth: bnxt: fix truesize for mb-xdp-pass case

...

CVE-2025-9742: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

Linux Distros Unpatched Vulnerability : CVE-2019-19577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering...

Linux Distros Unpatched Vulnerability : CVE-2020-28086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password,...

Linux Distros Unpatched Vulnerability : CVE-2019-18424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a...

CVE-2025-38605 wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to ath12kdptxgetencaptype In ath12kdptxgetencaptype, the arvif parameter is only used to retrieve the ab pointer. In vdev delete sequence the arvif-ar could become NULL and that would trigge...

OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...

Malicious code in @zalastax/nolb-pass (npm)

The package @zalastax/nolb-pass was found to contain malicious code...

Malicious code in working-ark-survival-primal-pass-generator (npm)

The package working-ark-survival-primal-pass-generator was found to contain malicious code...

Malicious code in pass-culture-pro (npm)

The package pass-culture-pro was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-none-shall-pass-9w6ra-hddlmn (npm)

The package file-alb-um-zip-new-mp3-none-shall-pass-9w6ra-hddlmn was found to contain malicious code...

MAL-2025-39453 Malicious code in working-ark-survival-primal-pass-generator (npm)

The package working-ark-survival-primal-pass-generator was found to contain malicious code...

MAL-2025-23254 Malicious code in instantly-ark-survival-primal-pass-generator (npm)

The package instantly-ark-survival-primal-pass-generator was found to contain malicious code...

MAL-2025-13043 Malicious code in @zalastax/nolb-pass (npm)

The package @zalastax/nolb-pass was found to contain malicious code...

MAL-2025-28895 Malicious code in pass-culture-pro (npm)

The package pass-culture-pro was found to contain malicious code...

ROS-20250812-02

The Liblouis translator vulnerability is due to a bounds error inside the compilePassOpcode function in the compileTranslationTable.c. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system Liblouis translator vulnerability is related to a boundar...

Cross-Site Scripting (XSS)

github.com/techarohq/anubis is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of the ?redir= parameter in the /.within.website/x/cmd/anubis/api/pass-challenge route, which allows an attacker to craft malicious pass-challenge pages that execute arbitrary...

The vulnerability of the generate_pass_from_mac function in D-Link DCS-6517 and DCS-7517 microprogrammed camera software allows a intruder to compromise the confidentiality of the protected information.

The vulnerability of the generatepassfrommac function in D-Link DCS-6517 and DCS-7517 microprogrammed camera software is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality of the protected information...

CVE-2013-10042

A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of...

CVE-2013-10042

A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of...