PT-2025-48187

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.3 through 18.4.4 GitLab CE/EE versions 18.5 through 18.5.2 GitLab CE/EE versions 18.6 through 18.6.0 Description An authenticated user with specific permissions could cause a denial of service condition through HTTP...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE versions 8.3 through before 18.4.5, 18...

Create Self-Improving AI Agents Using Spring AI Recursive Advisors

The Spring AI ChatClient offers a fluent API for communicating with an AI model. The fluent API provides methods for building the constituent parts of a prompt that gets passed to the AI model as input. Advisors are a key part of the fluent API that intercept, modify, and enhance AI-driven...

CVE-2025-39975

Concrete details available: The CVE-2025-39975 issue affects the Linux kernel SMB client, specifically smb2_compound_op() in fs/smb/client/smb2inode.c. The bug arises from incorrect indexing when processing each command’s response, causing improper handling of command results and, in some cases, ...

EUVD-2009-2059

Malware in sbrugna...

EUVD-2015-8903

Malware in sbrugna...

EUVD-2020-18557

Malware in sbrugna...

EUVD-2018-17318

Malware in sbrugna...

EUVD-2021-12130

Malware in sbrugna...

EUVD-2018-1786

Malware in sbrugna...

EUVD-2016-1200

Malicious code in bioql PyPI...

GitLab GraphQL API DoS

The vulnerability of the GraphQL API component of the software platform based on Git for collaborative code development on GitLab is related to the unlimited distribution of resources during HTTP response processing. Exploiting this vulnerability can allow a malicious actor to cause service...

CVE-2020-25928

The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: DNS response processing functions: dnsupcall, getoffset, dncsetanswer. The attack vector is: a specific DNS response packet. The code does not che...

CVE-2019-14041

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobil...

CVE-2025-2838: Loop with Unreachable Exit Condition

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerabilit...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

PT-2024-20524

Name of the Vulnerable Software and Affected Versions Silicon Labs Gecko OS affected versions not specified Description The issue is related to the DNS response processing in Silicon Labs Gecko OS, which can lead to an infinite loop and result in a denial-of-service. Recommendations At the moment...

CVE-2023-6148

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

CVE-2023-26449

CVE-2023-26449 affects Open-Xchange AppSuite’s OX Chat web service, where not specifying a media-type when handling responses from external resources enables potential cross-site script execution within the victim’s context. This could lead to session hijacking or unauthorized actions via the web...