5044 matches found
Exploit for Off-by-one Error in Sudo_Project Sudo
This is a PoC exploit for CVE-2021-3156, a sudo vulnerability dubbed Baron Samedit by Qualys. The exploit is written in C and uses a heap overflow technique to gain elevated privileges. The exploit is designed to be run on a system with the vulnerable sudo version installed. The usage of the...
SUSE CVE-2025-39723
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If all the subrequests in an unbuffered write stream fail, the subrequest collector doesn't update the stream-transferred value and it retains its initial LONGMAX value. Unfortunately, i...
Malicious code in @zalastax/nolb-_run (npm)
The package @zalastax/nolb-run was found to contain malicious code...
Malicious code in run-script-ganymede-npm-miranda (npm)
The package run-script-ganymede-npm-miranda was found to contain malicious code...
Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)
The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...
MAL-2025-43064 Malicious code in @zalastax/nolb-_run (npm)
The package @zalastax/nolb-run was found to contain malicious code...
MAL-2025-45935 Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)
The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...
MAL-2025-46176 Malicious code in superposition-mui-run-script-thuban (npm)
The package superposition-mui-run-script-thuban was found to contain malicious code...
Deserialization of Untrusted Data
Overview mlrun is a Tracking and config of machine learning runs Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the importfunctiontodict function in the run.py file. Details Serialization is a process of converting an object into a sequence of bytes whic...
SUSE SLES15: nv-prefer-signed-open-driver / etc (SUSE-SU-2025:03062-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03062-1 advisory. Updated CUDA variant to 580.65.06: - CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android has a code execution vulnerability that can be exploited by an attacker to execute arbitrary code on the system...
Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction
...
CLSA-2025-1756932191 buildah: Fix of CVE-2024-9407
CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification...
Linux Distros Unpatched Vulnerability : CVE-2024-50636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMOL 2.5.0 contains a vulnerability in its Run Script function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can...
CVE-2025-26210: Improper Neutralization of Input During Web Page Generation
DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepseeksvc.com domain. NOTE: some third parties have indicated that this is intended behavior...
Release Information for Veeam ONE 13.0.1 Patch 1
Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...
kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix use-after-free issue in ethskbpkttype KMSAN reported a use-after-free issue in ethskbpkttype1. The cause of the issue was that ethskbpkttype accessed skb's data that didn't contain an Ethernet header. This occur...
Malicious code in actions-run-service (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0096c4c86f75bd5815b589d90393b9d5efa12ac9fdae99a2cb6293475de0cbf8 The OpenSSF Package Analysis project identified 'actions-run-service' @ 0.0.1.r2301dc6 rubygems as malicious. It is considered malicious because...
MAL-2025-46891 Malicious code in actions-run-service (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0096c4c86f75bd5815b589d90393b9d5efa12ac9fdae99a2cb6293475de0cbf8 The OpenSSF Package Analysis project identified 'actions-run-service' @ 0.0.1.r2301dc6 rubygems as malicious. It is considered malicious because...
