CVE-2025-58066: Insufficient Control of Network Message Volume (Network Amplification)

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...

Linux Distros Unpatched Vulnerability : CVE-2023-34411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The...

gstreamer-plugins-rs-1.26.5+git11.949807a4-1.1 on GA media (moderate)

gstreamer-plugins-rs-1.26.5+git11.949807a4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15447-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8...

OPENSUSE-SU-2025:15446-1 gstreamer-plugins-rs-1.26.5+git11.949807a4-1.1 on GA media

These are all security issues fixed in the gstreamer-plugins-rs-1.26.5+git11.949807a4-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in angular-rs-alerts (npm)

The package angular-rs-alerts was found to contain malicious code...

Malicious code in rs-thrift2ts-win32-x64-msvc (npm)

The package rs-thrift2ts-win32-x64-msvc was found to contain malicious code...

MAL-2025-32500 Malicious code in rs-thrift2ts-win32-x64-msvc (npm)

The package rs-thrift2ts-win32-x64-msvc was found to contain malicious code...

Malicious code in @zalastax/nolb-react-rs (npm)

The package @zalastax/nolb-react-rs was found to contain malicious code...

MAL-2025-14531 Malicious code in angular-rs-alerts (npm)

The package angular-rs-alerts was found to contain malicious code...

CVE-2025-7616

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

CVE-2025-7616

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

CVE-2025-7616

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

CVE-2025-7616 gmg137 snap7-rs Public API pthread_cond_destroy memory corruption

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

CVE-2025-7616 gmg137 snap7-rs Public API pthread_cond_destroy memory corruption

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

CVE-2025-7616

CVE-2025-7616 affects gmg137 snap7-rs (up to 1.142.1). Affects the Public API’s pthread_cond_destroy function, where memory corruption is reported as the underlying issue. The exploit has been publicly disclosed. Impact stated in sources includes memory corruption potential; CVSS metrics vary by ...

snap7-rs 缓冲区错误漏洞

snap7-rs is a library for C++ by the individual developer gmg137. A buffer error vulnerability exists in snap7-rs 1.142.1 and earlier versions, which stems from memory corruption due to incorrect operation of the function pthreadconddestroy in the component Public API...

PT-2025-29476 · Snap7-Rs · Snap7-Rs

Name of the Vulnerable Software and Affected Versions: snap7-rs versions up to 1.142.1 Description: A critical issue exists in snap7-rs related to memory corruption. The pthread cond destroy function within the Public API component is affected. The exploit for this issue has been publicly...

CVE-2025-7616: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthreadconddestroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used...

ethereum-rs 代码问题漏洞

ethereum-rs is a Rust library open-sourced by Rust Ethereum. A code issue vulnerability exists in versions of ethereum-rs prior to v0.18.0, which stems from an incomplete signature malleability check...

Fedora 42 : ntpd-rs (2025-c480cf7e5e)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c480cf7e5e advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...