Linux Distros Unpatched Vulnerability : CVE-2016-3818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 28740702...

Linux Distros Unpatched Vulnerability : CVE-2016-3844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...

Linux Distros Unpatched Vulnerability : CVE-2024-7553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This...

Linux Distros Unpatched Vulnerability : CVE-2018-9132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denia...

Linux Distros Unpatched Vulnerability : CVE-2021-27845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c CVE-2021-27845 Note that Nessus relies on the...

Advisory ROSA-SA-2025-2963

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 3.0 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv30 affected versions xmlrpc-c-1.51.0-11.0.1.rv30 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a...

Advisory ROSA-SA-2025-2958

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 2.1 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv3 affected versions xmlrpc-c-1.51.0-11.0.1.rv3 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a stack-bas...

iExec brings TEE-based privacy tools to Arbitrum

Paris, France, 2025 - iExec has announced the deployment of its privacy framework on Arbitrum, enabling the creation…...

CWEXploit

This is a PoC Proof of Concept exploit for various CWE Common...

sslscan

This is a tool for scanning SSL/TLS protocols and ciphers on a target server. The tool is called sslscan and is written in C. It is designed to be a command-line interface for scanning SSL/TLS protocols and ciphers on a target server. The tool can be built on various platforms, including Linux an...

Exploit for Out-of-bounds Write in Gnu Glibc

PoC exploit for CVE-2015-0235, a vulnerability in the gethostbyname2r and gethostbynamer functions of the glibc library. The exploit is a shared library wrapper that provides an additional check for the vulnerable functions, preventing them from being called. The target is the glibc library,...

Malicious code in @zalastax/nolb-passport-c (npm)

The package @zalastax/nolb-passport-c was found to contain malicious code...

Malicious code in tansuo-c-gaoji-texing (npm)

The package tansuo-c-gaoji-texing was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-c (npm)

The package @zalastax/nolb-lion-c was found to contain malicious code...

Malicious code in @zalastax/nolb-async-c (npm)

The package @zalastax/nolb-async-c was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-c (npm)

The package @zalastax/nolb-lion-lib-c was found to contain malicious code...

MAL-2025-46237 Malicious code in tansuo-c-gaoji-texing (npm)

The package tansuo-c-gaoji-texing was found to contain malicious code...

MAL-2025-43133 Malicious code in @zalastax/nolb-async-c (npm)

The package @zalastax/nolb-async-c was found to contain malicious code...

MAL-2025-43312 Malicious code in @zalastax/nolb-lion-c (npm)

The package @zalastax/nolb-lion-c was found to contain malicious code...

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations

The threat actor behind the malware-as-a-service MaaS framework and loader called CastleLoader has also developed a remote access trojan known as CastleRAT. "Available in both Python and C variants, CastleRAT's core functionality consists of collecting system information, downloading and executin...