108 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling the return value of a structure operation, which could cause the kernel to crash...
EUVD-2020-30249
Malware in sbrugna...
EUVD-2013-0227
Malware in sbrugna...
EUVD-2013-4070
Malware in sbrugna...
EUVD-2020-17716
Malware in sbrugna...
EUVD-2025-10342
Malicious code in bioql PyPI...
SUSE-SU-2025:03423-1 Security update for apache2-mod_security2
This update for apache2-modsecurity2 fixes the following issues: - CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure bsc1247674...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling the debugfslookup return value, which could lead to a memory leak...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the return value of the BPF xmit operation, which could result in the continued transfe...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling the debugfslookup return value, which could lead to a memory leak...
Debian dla-4294 : libapache2-mod-security2 - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4294 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4294-1 [email protected] https://www.debian.org/lts/security/...
The vulnerability of the Geolocation-Based RA VPN microprogramming system in Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions.
The vulnerability of the Geolocation-Based RA VPN microprogramming system in Cisco Firepower Threat Defense FTD is related to incorrect handling of values. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...
The vulnerability of the Internet Key Exchange version 1 protocol (IKEv1) in Cisco IOS XE operating systems allows a attacker to induce a service failure.
The vulnerability of the Internet Key Exchange version 1 IKEv1 protocol in Cisco IOS XE operating systems is related to improper handling of undefined values. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
VulnCheck KEV: CVE-2025-48384
Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files...
The vulnerability of the http_d() function in Netgear WNCE3001 network adapter software allows a hacker to execute arbitrary code.
The vulnerability of the httpd function in Netgear WNCE3001 network adapter software lies in the fact that the return value of the operation is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-54571 ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrate...
libssh 安全漏洞
libssh is a C development package from the libssh organization for accessing SSH services, which is capable of executing remote commands, file transfers, as well as providing a secure transport channel for remote programs. A security vulnerability exists in libssh that stems from an inconsistent...
CVE-2025-38167
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdrfirstde return value The hdrfirstde function returns a pointer to a struct NTFSDE. This pointer may be NULL. To handle the NULL error effectively, it is important to implement an error handler. This will help...
CVE-2025-26783
An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Modem 5300, and Modem 5400. Incorrect handling of undefined values leads to a Denial of Service...
CVE-2025-23131
In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...