c-ares 资源管理错误漏洞

c-ares is a C library for asynchronous DNS requests from the c-ares individual developer. A resource management error vulnerability exists in c-ares versions 1.32.3 through 1.34.5, which stems from the readanswer and processanswer functions terminating a query after the maximum number of attempts...

PT-2025-49603

Name of the Vulnerable Software and Affected Versions c-ares versions 1.32.3 through 1.34.5 Description c-ares is an asynchronous resolver library. Versions between 1.32.3 and 1.34.5 improperly handle query termination after maximum attempts when utilizing the read answer and process answer...

CVE-2025-48624: Out-of-bounds Write

In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

MINI-GRX6-V45C-VXV9

Bulletin has no description...

CLSA-2025-1764958229 libxml2: Fix of CVE-2025-27113

CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c...

Security Bulletin: IBM DataPower Gateway vulnerable to a denial of service due to C-Ares

Summary C-Ares is used in IBM DataPower Gateway's DNS resolver Vulnerability Details CVEID:CVE-2025-31498 DESCRIPTION: c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in readanswers when processanswer may re-enqueue a query either due to a DNS...

[SECURITY] Fedora 42 Update: stb-0^20251025gitf1c79c0-2.fc42

Single-file public domain libraries for C/C++...

[SECURITY] Fedora 43 Update: stb-0^20251025gitf1c79c0-2.fc43

Single-file public domain libraries for C/C++...

Linux Distros Unpatched Vulnerability : CVE-2025-64756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection...

RockyLinux 9 : nodejs:18 (RLSA-2023:2654)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2654 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check CVE-2022-49...

CVE-2025-14008: Server-Side Request Forgery (SSRF)

A flaw has been found in dayrui XunRuiCMS up to 4.7.1. This vulnerability affects unknown code of the file admin79f2ec220c7e.php?c=api&m=testsitedomain of the component Project Domain Change Test. This manipulation of the argument v causes server-side request forgery. It is possible to initiate t...

Exploit for CVE-2025-41744

Lab: CVE-2025-41744 - Use of Default Cryptographic Key in Spre...

Exploit for CVE-2025-38001

Lab: CVE-2025-41744 - Use of Default Cryptographic Key in Spre...

Exploit for CVE-2025-41744

Lab: CVE-2025-41744 - Use of Default Cryptographic Key in Spre...

USN-7769-1 linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

ROS-20251203-07

Vulnerability of C language module for signing and encryption of JSON objects latchset Jose is related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

The vulnerability of the move_page_tables() function in the mm/mremap.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the movepagetables function in the mm/mremap.c module of the Linux kernel’s memory management subsystem is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the tcf_block_get_ext() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the tcfblockgetext function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the definition of the structure smc_inet6_protosw{} in the net/smc/smc_inet.c module of the SMC protocol family implementation in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the “smcinet6protosw” module’s definition of the structure in the “net/smc/smcinet.c” file within the SMC protocol family of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-200254

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition because of a lack of integrity protection...