2899 matches found
PT-2025-32229 · Suitecrm · Suitecrm
Name of the Vulnerable Software and Affected Versions: SuiteCRM versions 7.14.6 and 8.8.0 Description: SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions 7.14.6 and 8.8.0, user-supplied input is not validated or sanitized before being passed to the...
PT-2025-32242
Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description EDK2 contains a vulnerability in BIOS that may allow an attacker to cause a “Protection Mechanism Failure” with local access. Successful exploitation of this issue could lead to arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2022-50025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl: Fix a memory leak in an error handling path A bitmapzalloc must be balanced by a corresponding bitmapfree in the error handling path of afuallocateirqs...
Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks
In SaaS security conversations, "misconfiguration" and "vulnerability" are often used interchangeably. But they're not the same thing. And misunderstanding that distinction can quietly create real exposure. This confusion isn't just semantics. It reflects a deeper misunderstanding of the shared...
Linux Distros Unpatched Vulnerability : CVE-2023-52979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - squashfs: harden sanity check in squashfsreadxattridtable While mounting a corrupted filesystem, a signed integer 'xattrids' can become less than zero. This lea...
Linux Distros Unpatched Vulnerability : CVE-2025-38024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix slab-use-after-free Read in rxequeuecleanup bug Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x7d/0xa0 lib/dumpstack.c:120...
Linux Distros Unpatched Vulnerability : CVE-2025-38118
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: Fix UAF on mgmtremoveadvmonitorcomplete This reworks MGMTOPREMOVEADVMONITOR to not use mgmtpendingadd to avoid crashes like bellow:...
PT-2025-31959 · Undefined · Undefined
Hi, I run a following script for a vulnerability test for my home network; nmap 192.168.1.1/24 -n -sP |rg -o "192." scan.txt nmap -sV --script vulners --script-args mincvss=7.0 -iL scan.txt Then I get this Vulner output in port 80; Nmap scan report for 192.168.1.5 Host is up 0.00021s latency. Not...
Linux Distros Unpatched Vulnerability : CVE-2025-38141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called...
The Dark Side of Upgrades: Uncovering Security Risks in Smart Contract Upgrades
Smart contract upgrades are increasingly common due to their flexibility in modifying deployed contracts, such as fixing bugs or adding new functionalities. Meanwhile, upgrades compromise the immutability of contracts, introducing significant security concerns. While existing research has explore...
A Survey on Data Security in Large Language Models
Large Language Models LLMs, now a foundation in advancing natural language processing, power applications such as text generation, machine translation, and conversational systems. Despite their transformative potential, these models inherently rely on massive amounts of training data, often...
MAL-2025-6662 Malicious code in test-confusion (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6653 Malicious code in schematics-cli (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6425 Malicious code in jsonwedjoken (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6403 Malicious code in bergaa (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6625 Malicious code in zlapp (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6595 Malicious code in spokeoapi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6592 Malicious code in sparsify-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=-...