ThreatExploiter

🔴 ThreatExploiter Automated Network Penetration Testing & E...

CVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

The vulnerability of the `comedi/drivers/pcl726.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the comedi/drivers/pcl726.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause service failures...

CVE-2024-44598

CVE-2024-44598 concerns FNT Command 13.4.0, which is reported as vulnerable to code execution via the C Base Module . The available sources consistently describe a code execution flaw in this module, but do not provide explicit technical details about the vulnerable component, affected versions b...

CVE-2025-14569

A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project w...

CVE-2025-14569 ggml-org whisper.cpp common-whisper.cpp read_audio_data use after free

A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project w...

OESA-2025-2821 mongo-c-driver security update

Security Fixes: A mongocbulkoperationt may read invalid memory if large options are passed.CVE-2025-12119...

OESA-2025-2823 mongo-c-driver security update

Security Fixes: A mongocbulkoperationt may read invalid memory if large options are passed.CVE-2025-12119...

[SECURITY] Fedora 43 Update: dr_libs-0^20251201.877b096-1.fc43

Single-file audio decoding libraries for C/C++...

Ubuntu: Security Advisory (USN-7925-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : c-ares -- Use After Free (1adf9ece-d4a3-11f0-83a2-843a4b343614)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1adf9ece-d4a3-11f0-83a2-843a4b343614 advisory. https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5 reports: c-ares is an...

Ubuntu 25.04 / 25.10 : c-ares vulnerability (USN-7925-1)

The remote Ubuntu 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7925-1 advisory. It was discovered that c-ares incorrectly handled terminating certain queries after a maximum number of attempts. An attacker could possibly use this issue to...

USN-7925-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled terminating certain queries after a maximum number of attempts. An attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service...

USN-7925-1 c-ares vulnerability

It was discovered that c-ares incorrectly handled terminating certain queries after a maximum number of attempts. An attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service...

CVE-2025-62408

A flaw was found in c-ares. This vulnerability allows a Denial of Service DoS via terminating a query after maximum attempts when using readanswer and processanswer functions. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

SUSE CVE-2025-62408

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...

PT-2025-51134

It was discovered that c-ares incorrectly handled terminating certain queries after a maximum number of attempts. An attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. Update Instructions: Run sudo pro fix USN-7925-1 to fix the vulnerability. The...

[SECURITY] Fedora 42 Update: lunasvg-3.5.0-1.fc42

LunaSVG is a standalone SVG rendering library in C++...

Command Execution Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-1018960)

Ltd. is a deep-rooted enterprise in the field of visualization. A command execution vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to remotely execute commands...

Security Bulletin: IBM® Db2® is affected by a vulnerability in the mongo library (CVE-2025-0755)

Summary IBM® Db2® is affected by a vulnerability in MongoDB C driver library and may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible applicatio...