370 matches found
ReGraph: a Tool for Binary Similarity Identification
Binary Code Similarity Detection BCSD is not only essential for security tasks such as vulnerability identification but also for code copying detection, yet it remains challenging due to binary stripping and diverse compilation environments. Existing methods tend to adopt increasingly complex...
Malicious code in across-package-test2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2834 Malicious code in across-package-test2 (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2025-29781
The Bare Metal Operator BMO implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitrary namespaces upon deployment of the namespace scoped Custom Resource BMCEventSubscription. Prior to versions 0.8.1 and 0.9.1, an adversary...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from dsa that could lead to array out-of-bounds access and crashes when synchronizing VLAN filtering across chips...
UBUNTU-CVE-2025-0937
Nomad Community and Nomad Enterprise "Nomad" event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Reverted the behavior where “Info: mapping multiple BARs. Your kernel is fine.” was avoided. Undo the modifications made in commit d410ee5109a1 “ACPICA: avoid “Info: mapping multiple BARs. Your kernel is fine.””. The...
CVE-2025-20894
Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multiple user profiles...
SAMSUNG Mobile devices 安全漏洞
Samsung Email is an email application developed by the Korean company Samsung SAMSUNG, designed to provide users with a convenient interface to manage and process email. Samsung Email suffers from an Access Control Error vulnerability that stems from an improper access control issue included in...
PT-2025-4166 · Samsung · Samsung Message
Name of the Vulnerable Software and Affected Versions: Samsung Message versions prior to SMR Jan-2025 Release 1 Description: The issue is related to improper access control in Samsung Message, allowing physical attackers to access data across multiple user profiles. This could potentially lead to...
firefox: thunderbird: WebChannel APIs susceptible to confused deputy attack
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to...
CVE-2024-56330 Session VNC may be accessed by other sessions on the same host in stardust
Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...
CVE-2024-52590 Missing validation allows spoofed profiles in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...
DEBIAN-CVE-2024-54534
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption...
OESA-2024-2468 postgresql security update
PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...
CVE-2018-9421
In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
firefox: thunderbird: Clipboard "paste" button persisted across tabs
The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...
PT-2024-31624 · Zoom · Zoom Product Suite
Name of the Vulnerable Software and Affected Versions: Zoom Product Suite versions prior to 6.2.0 Description: A buffer overflow issue in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access. This issue can be exploited by authenticated users,...
firefox: thunderbird: Clipboard "paste" button persisted across tabs
The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...