428 matches found
CVE-2024-51744 affecting package packer for versions less than 1.9.5-11
CVE-2024-51744 affecting package packer for versions less than 1.9.5-11. A patched version of the package is available...
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection
Cybersecurity researchers are calling attention to a new sophisticated malware called CoffeeLoader that's designed to download and execute secondary payloads. The malware, according to Zscaler ThreatLabz, shares behavioral similarities with another known malware loader known as SmokeLoader. "The...
DEBIAN-CVE-2025-2849
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...
UBUNTU-CVE-2025-2849
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...
UPX 安全漏洞
UPX is a free, secure, portable, scalable, high-performance executable shelling program for a wide range of executable formats. A security vulnerability exists in UPX 5.0.0 and earlier versions, which stems from an incorrect operation of the PackLinuxElf64::unDTINIT function that can cause a heap...
CVE-2024-45337 affecting package packer for versions less than 1.9.5-4
CVE-2024-45337 affecting package packer for versions less than 1.9.5-4. A patched version of the package is available...
AZL-59204 CVE-2025-30204 affecting package packer for versions less than 1.9.5-7
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
AZL-59242 CVE-2025-30204 affecting package packer for versions less than 1.9.5-12
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...
CVE-2025-27144 affecting package packer for versions less than 1.9.5-6
CVE-2025-27144 affecting package packer for versions less than 1.9.5-6. A patched version of the package is available...
CVE-2025-22869 affecting package packer for versions less than 1.9.5-6
CVE-2025-22869 affecting package packer for versions less than 1.9.5-6. A patched version of the package is available...
CVE-2024-28180 affecting package packer for versions less than 1.9.5-6
CVE-2024-28180 affecting package packer for versions less than 1.9.5-6. A patched version of the package is available...
CVE-2025-22868 affecting package packer for versions less than 1.9.5-6
CVE-2025-22868 affecting package packer for versions less than 1.9.5-6. A patched version of the package is available...
AZL-58396 CVE-2025-22870 affecting package packer for versions less than 1.9.5-12
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
AZL-58469 CVE-2025-22870 affecting package packer for versions less than 1.9.5-9
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks
The threat actor known as Blind Eagle has been linked to a series of ongoing campaigns targeting Colombian institutions and government entities since November 2024. "The monitored campaigns targeted Colombian judicial institutions and other government or private organizations, with high infection...
CVE-2025-22868 affecting package packer for versions less than 1.9.5-10
CVE-2025-22868 affecting package packer for versions less than 1.9.5-10. A patched version of the package is available...
CVE-2025-22869 affecting package packer for versions less than 1.9.5-10
CVE-2025-22869 affecting package packer for versions less than 1.9.5-10. A patched version of the package is available...
CVE-2025-27144 affecting package packer for versions less than 1.9.5-9
CVE-2025-27144 affecting package packer for versions less than 1.9.5-9. A patched version of the package is available...
AZL-57458 CVE-2025-22869 affecting package packer for versions less than 1.9.5-10
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...