CVE-2026-59161

CVE-2026-59161 affects the Go library Excelize. The streaming worksheet reader used by Rows/GetRows could bypass the TotalRows limit, enabling an attacker-controlled index to cause unbounded memory and CPU usage by generating empty rows beyond 1048576. The issue is fixed in version 2.11.0; upgrad...

CVE-2026-13905

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Medium...

CVE-2026-3931

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004073 advisory. A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka...

CVE-2025-64429

A vulnerability was found in DuckDB’s database encryption design. In certain situations, DuckDB could generate encryption keys using a weak random number generator, fail to reliably wipe keys from memory, accept manipulated database headers that disable integrity protection, or miss detecting...

EUVD-2017-16618

Malware in sbrugna...

EUVD-2005-0011

Malware in sbrugna...

EUVD-2024-18551

Malicious code in bioql PyPI...

EUVD-2024-19914

Malicious code in bioql PyPI...

EUVD-2024-23297

Malicious code in bioql PyPI...

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2025-20239

CVE-2025-20239 describes an unauthenticated, remote-execution of a memory-leak/DoS in the IKEv2 processing of Cisco IOS, IOS XE, ASA, and FTD. Exploitation via crafted IKEv2 packets can cause IOS/IOS XE devices to reload; ASA/FTD may partially exhaust memory leading to instability and inability t...

Linux Distros Unpatched Vulnerability : CVE-2023-29536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker- controlled memory, resulting in an assertion, memory corruptio...

CVE-2025-7027 SMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx1

A vulnerability in the Software SMI handler SwSmiInputValue 0xB2 allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable SetupXtuBufferAddress, while the write content is read from a...

TencentOS Server 3: libXpm (TSSA-2024:0181)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0181 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-22886

OpenHarmony vulnerability CVE-2025-22886 affects OpenHarmony v5.0.3 and earlier. The issue stems from missing release of memory in a component, enabling a local attacker to cause a Denial of Service. Affected scope is limited to local access; integrity and confidentiality are not impacted per ava...

CVE-2025-29931

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could allow an unauthenticated...

CVE-2025-25057

CVE-2025-25057 affects OpenHarmony v5.0.2 and earlier. The root cause is a memory release issue that can be exploited locally to cause a denial of service (memory leak). The available sources consistently describe a local attacker and a DoS outcome due to unfreed memory, but do not provide concre...

CVE-2024-53698

CVE-2024-53698 is a double free vulnerability affecting QNAP QTS and QuTS hero. Root cause: memory management flaw that could allow remote attackers who have gained administrator access to modify memory. Impact stated: exploit could enable memory modification. Remediation: fixed in QTS 5.2.3.3006...

Linux Distros Unpatched Vulnerability : CVE-2024-7347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its...