21145 matches found
cmd/go: Go VCS Command Execution Vulnerability
A flaw was found in cmd/go. The go command can execute arbitrary commands when processing untrusted version control system VCS repositories containing malicious configuration. This issue occurs because the command interprets VCS metadata, potentially leading to unintended command execution. This...
Linux Distros Unpatched Vulnerability : CVE-2022-46338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing...
Linux Distros Unpatched Vulnerability : CVE-2023-37576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitra...
Linux Distros Unpatched Vulnerability : CVE-2025-0495
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values...
Linux Distros Unpatched Vulnerability : CVE-2022-35471
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0. CVE-2022-35471 Note that Nessus relies on the presence of th...
Findsploit
It is an offensive tool for searching exploit databases. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool searches for exploits in local and online databases, suggesting it is a general-purpose exploit finder...
Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware
This is a PoC exploit for CVE-2019-19781, a vulnerability in Citrix ADC NetScaler that allows for unauthenticated remote code execution. The tool, called Citrixmash, was published by TrustedSec due to other researchers releasing their code first. The exploit exploits a directory traversal bug in...
firejail
This repository is an open-source Linux sandboxing platform called Firejail. It is a Linux namespaces and seccomp-bpf sandbox that allows users to run applications in a secure environment, isolating them from the rest of the system. The repository contains a variety of tools and scripts for...
Systematic Analysis of MCP Security
The Model Context Protocol MCP has emerged as a universal standard that enables AI agents to seamlessly connect with external tools, significantly enhancing their functionality. However, while MCP brings notable benefits, it also introduces significant vulnerabilities, such as Tool Poisoning...
framework_tool-0.4.5-2.1 on GA media (moderate)
frameworktool-0.4.5-2.1 on GA media Announcement ID: openSUSE-SU-2025:15445-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8...
OESA-2025-2051 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
Linux Distros Unpatched Vulnerability : CVE-2024-0124
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by...
Linux Distros Unpatched Vulnerability : CVE-2025-38197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dellrbu: Fix list usage Pass the correct list head to listforeachentry when...
OPENSUSE-SU-2025:15444-1 framework_tool-0.4.5-2.1 on GA media
These are all security issues fixed in the frameworktool-0.4.5-2.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in episode-free-gems-passes-tool-home-facebook (npm)
The package episode-free-gems-passes-tool-home-facebook was found to contain malicious code...
Malicious code in cpdo-ref-tool (npm)
The package cpdo-ref-tool was found to contain malicious code...
Malicious code in spica-figures-tool-kardashevscale (npm)
The package spica-figures-tool-kardashevscale was found to contain malicious code...
deletenewf (1.0.0), itheima-tool-time (1.0.0) +1 more potentially affected by unknown CVE via jquey (0.0.1-security)
jquey NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf 1.0.0 - itheima-tool-time 1.0.0 - untitledfedorsh 1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23906...
com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)
com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...