2409 matches found
Malicious code in adonis-await-winston-non-blocking (npm)
The package adonis-await-winston-non-blocking was found to contain malicious code...
Malicious code in sirius-non-blocking-plutology-carina (npm)
The package sirius-non-blocking-plutology-carina was found to contain malicious code...
Malicious code in non-blocking-sirius-standard-darkenergy (npm)
The package non-blocking-sirius-standard-darkenergy was found to contain malicious code...
MAL-2025-45991 Malicious code in selenology-blackhole-non-blocking-xanadu (npm)
The package selenology-blackhole-non-blocking-xanadu was found to contain malicious code...
MAL-2025-45359 Malicious code in non-blocking-sirius-standard-darkenergy (npm)
The package non-blocking-sirius-standard-darkenergy was found to contain malicious code...
CVE-2025-48581
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
...
QNAP Qsync Central Unlimited Resource Allocation Vulnerability
QNAP Qsync Central is a private cloud synchronization service launched by QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices. An unrestricted resource allocation vulnerability exists in QNAP Qsync Central, which can be exploited by an attacker to...
The vulnerability of the cdns3 component in the Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability of the cdns3 component in the Linux operating system’s kernel is related to a freeze that occurs due to repeated resource blocking. Exploiting this vulnerability can allow an attacker who operates remotely to cause service interruptions...
CVE-2025-29890
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...
CVE-2025-30261 Qsync Central
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...
CVE-2025-30260 Qsync Central
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...
PT-2025-44139
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the tty subsystem, specifically in the n gsm component. The issue arises from the potential to block the input queue while waiting for a Modem...
ROS-20250825-04
A vulnerability in ASGI Starlette toolkit for creating asynchronous Python web services is related to blocking the main thread for transferring a file to disk. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20250819-07
Xen hypervisor vulnerability is related to mutual blocking of execution threads. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2019-20330
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. CVE-2019-20330 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2020-8840
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter...
Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm)
The package blazar-non-blocking-dotenv-parse-variables-test was found to contain malicious code...