MAL-2025-14583 Malicious code in antares-non-blocking-inflation-html-webpack-plugin (npm)

The package antares-non-blocking-inflation-html-webpack-plugin was found to contain malicious code...

MAL-2025-15075 Malicious code in australis-jsonp-janus-non-blocking (npm)

The package australis-jsonp-janus-non-blocking was found to contain malicious code...

MAL-2025-25409 Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)

The package lint-staged-ceres-metalsmith-non-blocking was found to contain malicious code...

MAL-2025-40881 Malicious code in zenobia-regulus-non-blocking-start (npm)

The package zenobia-regulus-non-blocking-start was found to contain malicious code...

MAL-2025-27715 Malicious code in non-blocking-antimatter-repository-fermion (npm)

The package non-blocking-antimatter-repository-fermion was found to contain malicious code...

MAL-2025-17600 Malicious code in corvus-ariel-non-blocking-webdriver-mocha (npm)

The package corvus-ariel-non-blocking-webdriver-mocha was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2021-47169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: rp2: use 'requestfirmware' instead of 'requestfirmwarenowait' In 'rp2probe', the driver registers 'rp2uartinterrupt' then calls 'rp2fwcb' through...

Linux Distros Unpatched Vulnerability : CVE-2021-46939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Restructure traceclockglobal to never block It was reported that a fix to the ring buffer recursion detection would cause a hung machine when performin...

The vulnerability of the user blocking mechanism of the Vault Enterprise and Vault Community Edition corporate information archiving platforms allows attackers to circumvent existing security restrictions.

The vulnerability of the user blocking mechanism in the Vault Enterprise and Vault Community Edition corporate information archiving platforms is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security...

Linux Distros Unpatched Vulnerability : CVE-2025-21986

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chai...

Linux Distros Unpatched Vulnerability : CVE-2020-1938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher...

dm cache: prevent BUG_ON by blocking retries on failed device resumes

...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to mutual flow blocking, allows a attacker to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to mutual blocking of execution streams. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2025-30951 · Anubis · Anubis

Name of the Vulnerable Software and Affected Versions: Anubis versions 1.21.2 and below Description: Anubis is a Web AI Firewall Utility designed to protect upstream resources from scraper bots. Attackers can craft malicious pass-challenge pages that cause a user to execute arbitrary JavaScript...

Denial Of Service (DoS)

Starlette is vulnerable to Denial Of Service DoS. The vulnerability is due to blocking of the main event thread caused by improper handling of large multipart file uploads, where a bug in the UploadFile logic fails to anticipate memory rollover, blocking the application from accepting new...

WordPress plugin Security Ninja 安全漏洞

WordPress Security Ninja is a plugin that focuses on website security protection, providing automated security scanning, login protection, IP blocking, and two-factor authentication to help users proactively identify security risks and prevent hacker attacks. WordPress Security Ninja has an...

The vulnerability of the nfs_return_empty_folio() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsreturnemptyfolio function in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2025-54121

Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread t...

GHSA-2C2J-9GV5-CJ73 Starlette has possible denial-of-service vector when parsing large files in multipart forms

Summary When parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread to roll the file over to disk. This blocks the event thread which means we can't accept new connections. Details Please see this discussion for details:...

The vulnerability of the Golang programming language, related to insufficient or incorrect blocking mechanisms, allows for situations where a violator can delete arbitrary directories.

The vulnerability of the Golang programming language is related to insufficient or incorrect blocking measures. Exploiting this vulnerability could allow a remote attacker to delete any directories at will...