601 matches found
CGA-7R8G-63QW-P9CF
Bulletin has no description...
CVE-2010-20122
Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...
CVE-2010-20122 Xftp FTP Client <= 3.0 PWD Response Buffer Overflow
Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...
Linux Distros Unpatched Vulnerability : CVE-2023-34053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS...
The vulnerability of the gf_ac4_pres_b_4_back_channels_present function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfac4presb4backchannelspresent function in the MP4Box utility of the GPAC multimedia platform is related to the swapping of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
GHSA-9X9C-GHC5-JHW9
creationtimestamp| type| source ---|---|--- 2025-08-15 15:34:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033509822272775...
Linux Distros Unpatched Vulnerability : CVE-2024-46792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory rawcopyto,fromuser do not call...
Malicious code in @zalastax/nolb-_uq (npm)
The package @zalastax/nolb-uq was found to contain malicious code...
Malicious code in @zalastax/nolb-axk (npm)
The package @zalastax/nolb-axk was found to contain malicious code...
Malicious code in saffron_vlrfe_de9i9_aurora (npm)
The package saffronvlrfede9i9aurora was found to contain malicious code...
MAL-2025-12262 Malicious code in @zalastax/nolb-lione (npm)
The package @zalastax/nolb-lione was found to contain malicious code...
MAL-2025-38847 Malicious code in watermelon-almond-gf7n (npm)
The package watermelon-almond-gf7n was found to contain malicious code...
Malicious code in @zalastax/nolb-ngx6 (npm)
The package @zalastax/nolb-ngx6 was found to contain malicious code...
MAL-2025-14585 Malicious code in antares-stratosphere-darkmatter-oscillation (npm)
The package antares-stratosphere-darkmatter-oscillation was found to contain malicious code...
MAL-2025-30028 Malicious code in project-bk1h5-india (npm)
The package project-bk1h5-india was found to contain malicious code...
MAL-2025-7832 Malicious code in @dramateas/veritatis-quidem-quis-odit (npm)
The package @dramateas/veritatis-quidem-quis-odit was found to contain malicious code...
Active Storage allowed transformation methods that were potentially unsafe
Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allowing for the circumvention of the safe defaults which enables potential command injection vulnerabilities in cases where...
Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild. The vulnerability, tracked as CVE-2025-25256 , carries a CVSS score of 9.8 out of a maximum of 10.0. "An improper neutralization of special elements used in an OS command...