Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: idpf: fixed checksums set in idpfrxrsc idpfrxrsc uses skbtransportoffsetskb when the transport header is not yet set. This triggers the following warning in builds with CONFIGDEBUGNET=y:...

@accounter/client (>=0.0.4-alpha-20250320090944-cdc782d0161db7e3f975b7da0860200fd07b490b, <=0.0.4-alpha-20250326170142-96e7a3c4676b50d865f58a42522ed17e4da19ca8), @adithya07/nextn (0.1.0) +28 more potentially affected by CVE-2025-30218 via next (15.2.3)

next NPM version 15.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @accounter/client =0.0.4-alpha-20250320090944-cdc782d0161db7e3f975b7da0860200fd07b490b, =0.1.0, =0.1.8, =0.0.2, =0.1.10, =1.0.0, =0.1.0, =0.1.39, =0.1.4...

1ocalendar (1.0.0), 24social-ui (>=1.0.0, <=1.0.5) +2610 more potentially affected by CVE-2024-56332 via next (>=13.0.0, <=13.5.7-canary.37)

next NPM version =13.0.0, =1.0.0, =1.0.51, =1.6.1, =0.5.5, =0.1.23, =2.0.0-rc19, =0.2.47, =0.4.37, =1.3.2, =0.0.2, =1.0.0, =0.0.1, =0.0.6 and more Source cves: CVE-2024-56332 Source advisory: OSV:GHSA-7M27-7GHC-44W9...

3abn (>=1.0.0, <=2.1.11), @2003scape/rsc-sounds (>=1.0.0, <=1.0.1) +380 more potentially affected by CVE-2024-21526 via speaker (>=0.0.10, <=0.5.5)

speaker NPM version =0.0.10, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21526 Source advisory: OSV:GHSA-W5FC-GJ3H-26RX...

Design/Logic Flaw

urql is a GraphQL client that exposes a set of helpers for several frameworks. The @urql/next package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns html tags and that the web-application is using streamed responses non-RSC. This vulnerability is...

CVE-2024-24556 XSS in @urql/next

urql is a GraphQL client that exposes a set of helpers for several frameworks. The @urql/next package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns html tags and that the web-application is using streamed responses non-RSC. This vulnerability is...

rsc-service.de Improper Access Control vulnerability OBB-3780151

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora: Security Advisory for golang-rsc-pdf (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-rsc-pdf-0.1.1-11.fc36

PDF reader library in Go...

Fedora: Security Advisory for golang-rsc-pdf (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-rsc-pdf-0.1.1-10.fc35

PDF reader library in Go...

Fedora: Security Advisory for golang-rsc-pdf (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-rsc-pdf-0.1.1-10.fc36

PDF reader library in Go...

CVE-2021-27221

MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work...

CVE-2021-27221

MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work...

MikroTik RouterOS 命令注入漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A security vulnerability exists in MikroTik RouterOS version 6.47.9 that allows remote authenticated ftp users to...

Code injection

IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference : 1998459...

CVE-2017-1134

CVE-2017-1134 describes a local privilege-escalation vulnerability in IBM Reliable Scalable Cluster Technology (RSC) shipped with IBM Tivoli System Automation for Multiplatforms (TSAMP). The issue allows a local attacker to gain root privileges. IBM references indicate affected TSAMP versions 4.1...

The Truman show: the Ｈacking Team Win32 monitor code analysis-vulnerability warning-the black bar safety net

Hacking Team,an Italian software company. Their company is mainly to governments and legal bodies selling intrusion and surveillance software. 7 on the 5th night by the hacker attack, 400G of information were to leak, 0Day, various exploits also together is known around the world know, which is t...

Solaris 5.8 (sparc) : 107424-03

RSC 1.0 patch. Date this patch was last updated by Sun : Oct/24/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...