BIT-KYVERNO-2025-47281 Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service

Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service DoS vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft...

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...

CVE-2025-8699

KioSoft **

Signature Malleability

github.com/consensys/gnark is vulnerable to signature malleability. The vulnerability is due to improper validation of the S value in EdDSA and ECDSA signatures not enforcing 0 ≤ S order, which allows an attacker to create multiple valid signatures for the same public input, potentially enabling...

simdjson:fuzz_element: Use-of-uninitialized-value in fuzz_element.cpp

Detailed Report: https://oss-fuzz.com/testcase?key=6561174117482496 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzelement Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fuzzelement.cpp Sanitizer: memory MSAN...

simdjson:fuzz_ndjson: Use-of-uninitialized-value in simdjson::dom::stage1_worker::stop_thread

Detailed Report: https://oss-fuzz.com/testcase?key=6540286584225792 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzndjson Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: simdjson::dom::stage1worker::stopthread...

simdjson:fuzz_dump_raw_tape: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char>>& std::__1::__put_char

Detailed Report: https://oss-fuzz.com/testcase?key=6373537834401792 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdumprawtape Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream& std::1::putchar...

simdjson:fuzz_dump: Use-of-uninitialized-value in simdjson::internal::adjusted_mantissa simdjson::internal::compute_float<simdjson

Detailed Report: https://oss-fuzz.com/testcase?key=5972150055141376 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: simdjson::internal::adjustedmantissa...

simdjson:fuzz_dump: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char>>& std::__1::__put_char

Detailed Report: https://oss-fuzz.com/testcase?key=5584819905167360 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream& std::1::putchar printjs...

simdjson:fuzz_element: Use-of-uninitialized-value in element-inl.h

Detailed Report: https://oss-fuzz.com/testcase?key=5320136975515648 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzelement Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: element-inl.h Sanitizer: memory MSAN...

simdjson:fuzz_minify: Use-of-uninitialized-value in simdjson::internal::dtoa_impl::boundaries simdjson::internal::dtoa_impl::compute

Detailed Report: https://oss-fuzz.com/testcase?key=5035162070220800 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzminify Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: simdjson::internal::dtoaimpl::boundaries...

simdjson:fuzz_implementations: Use-of-uninitialized-value in simdjson::internal::string_builder<simdjson::internal::mini_formatter>::append

Detailed Report: https://oss-fuzz.com/testcase?key=4934566419955712 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzimplementations Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

simdjson:fuzz_padded: Use-of-uninitialized-value in padded_string-inl.h

Detailed Report: https://oss-fuzz.com/testcase?key=4855610425540608 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzpadded Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: paddedstring-inl.h paddedstring.h Sanitizer...

KioSoft Stored Value Unattended Payment Solutions 安全漏洞

KioSoft Stored Value Unattended Payment Solutions is a self-service payment solution from KioSoft USA. A security vulnerability exists in KioSoft Stored Value Unattended Payment Solutions that stems from the use of an insecure MiFare Classic NFC card to store account balances, which could allow a...

GHSA-QHJ8-Q5R6-8Q6J matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method

In matrix-sdk-base before 0.14.1, calling the RoomMember::normalizedpowerlevel method can cause a panic if a room member has a power level of Int::Min. Patches The issue is fixed in matrix-sdk-base 0.14.1. Workarounds The affected method isn’t used internally, so avoiding calling...

simdjson:fuzz_minify: Use-of-uninitialized-value in simdjson::internal::string_builder<simdjson::internal::mini_formatter>::append

Detailed Report: https://oss-fuzz.com/testcase?key=4620949082406912 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzminify Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: simdjson::internal::stringbuilder::append...

simdjson:fuzz_minifyimpl: Use-of-uninitialized-value in std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::vector

Detailed Report: https://oss-fuzz.com/testcase?key=4565767342587904 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzminifyimpl Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::vector::vector...

PT-2025-44119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to vringh handling. The issue involves an incorrect check of return values from the copy from iter and copy to iter functions, potentially leadi...

Linux Distros Unpatched Vulnerability : CVE-2018-16809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and...