7063 matches found
CVE-2025-50891
The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...
CVE-2025-38596
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthorgemcreatewithhandle debugfs code The object is potentially already gone after the drmgemobjectput. In general the object should be fully constructed before calling drmgemhandlecreate, except the...
[SECURITY] Fedora 41 Update: uv-0.8.8-1.fc41
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
Adform Site Tracking 跨站脚本漏洞
Adform Site Tracking is a functional software for mobile user programs on websites and applications from Danish company Adform. A cross-site scripting vulnerability exists in Adform Site Tracking version 1.1 that originates from HTML injection or arbitrary code execution...
PT-2025-33850 · Adform · Adform Site Tracking
Name of the Vulnerable Software and Affected Versions: Adform Site Tracking version 1.1 Description: Adform Site Tracking version 1.1 is susceptible to HTML injection and arbitrary code execution through cookie hijacking. Recommendations: At the moment, there is no information about a newer versi...
CVE-2025-50891
CVE-2025-50891 affects Adform Site Tracking (backend) and specifically Adform Site Tracking version 1.1. It describes HTML injection and arbitrary code execution via cookie hijacking in the server-side backend, with CVSSv3.1 base score 7.2 (HIGH) and network attack vector with low attack complexi...
CVE-2025-50891
The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...
Linux Distros Unpatched Vulnerability : CVE-2024-10026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot...
CVE-2025-38511
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...
GHSA-77H3-W9RX-HJ3Q User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows
The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...
User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows
The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...
Malicious code in @berush/tracking-pixel (npm)
The package @berush/tracking-pixel was found to contain malicious code...
Malicious code in hw-tracking (npm)
The package hw-tracking was found to contain malicious code...
Malicious code in paychex-tracking (npm)
The package paychex-tracking was found to contain malicious code...
MAL-2025-7063 Malicious code in @amber-team/react-event-tracking (npm)
The package @amber-team/react-event-tracking was found to contain malicious code...
Malicious code in airbnb-tracking (npm)
The package airbnb-tracking was found to contain malicious code...
Malicious code in sp-tracking (npm)
The package sp-tracking was found to contain malicious code...
Malicious code in hw-performance-tracking (npm)
The package hw-performance-tracking was found to contain malicious code...