cpp-httplib read_headers() DoS

The vulnerability of the readheaders function in the cpp-httplib library is related to an uncontrolled resource consumption during the processing of headers. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-28907

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

SUSE-SU-2025:20455-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-47081: Fixed incorrect URL processing leading to .netrc credential leak bsc1244039...

Security update for python-requests

This update for python-requests fixes the following issues: CVE-2024-47081: Fixed incorrect URL processing leading to .netrc credential leak bsc1244039 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Hikvision IP cameras PrivateKey Buffer Overflow DoS

The vulnerability of Hikvision’s IP cameras’ microprogramming software is related to the issue where the operation data escapes from the buffer into memory when processing the PrivateKey parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure by sending a...

Mozilla Firefox Security Bypass Redirect

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to improper encoding or evasion of output data during the processing of the embed tag. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and redirect users to another website...

PT-2025-27356

Name of the Vulnerable Software and Affected Versions: chatchat-space Langchain-Chatchat versions up to 0.3.1 Description: A critical issue has been found in the processing of the file "/v1/file". The manipulation of the flag argument leads to path traversal. The exploit has been disclosed to the...

CVE-2023-28907

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2025-1991

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

CVE-2025-1991

CVE-2025-1991 affects IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0. The vulnerability is a denial of service caused by an integer underflow during packet processing. IBM’s advisory (ID 7238455) lists fixed releases: 12.10.xC16W2 for 12.10 and 14.10.xC11W2 for 14.10; 15.0 is also li...

Facebook's New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns

Facebook, the social network platform owned by Meta, is asking for users to upload pictures from their phones to suggest collages, recaps, and other ideas using artificial intelligence AI, including those that have not been directly uploaded to the service. According to TechCrunch, which first...

Facebook’s New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns

Facebook, the social network platform owned by Meta, is asking for users to upload pictures from their phones to suggest collages, recaps, and other ideas using artificial intelligence AI, including those that have not been directly uploaded to the service. According to TechCrunch, which first...

IBM Informix Dynamic Server numerical error vulnerability

IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides continuous data availability and disaster recovery, among other features, for clustered data centers. A numeric error vulnerability exists in IBM Informix Dynamic...

CVE-2023-28907: Improper Access Control

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2023-28905: Heap-based Buffer Overflow

A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part...

CVE-2023-28903: Integer Overflow or Wraparound

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system...

CVE-2023-28902: Integer Underflow (Wrap or Wraparound)

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part...

CVE-2025-1991: Integer Underflow (Wrap or Wraparound)

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

PT-2025-27311 · Volkswagen · Mib3

Name of the Vulnerable Software and Affected Versions: MIB3 infotainment affected versions not specified Description: The issue is related to the lack of memory isolation between CPU cores of the MIB3 infotainment, allowing an attacker with access to the main operating system to compromise the CP...

Volkswagen MIB3 Infotainment security vulnerabilities

Volkswagen MIB3 Infotainment is an infotainment system on a vehicle from Volkswagen Germany. A security vulnerability exists in Volkswagen MIB3 Infotainment, which originates from an integer overflow in an image processing binary, which could lead to a denial of service in the infotainment system...