20424 matches found
Advisory ROSA-SA-2025-2958
Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 2.1 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv3 affected versions xmlrpc-c-1.51.0-11.0.1.rv3 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a stack-bas...
CVE-2025-52322: Uncontrolled Resource Consumption
An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session Request message to the SMF PGW-C, using the IP address of a legitimate UE in the PDN Address Allocation PAA field...
iExec brings TEE-based privacy tools to Arbitrum
Paris, France, 2025 - iExec has announced the deployment of its privacy framework on Arbitrum, enabling the creation…...
CWEXploit
This is a PoC Proof of Concept exploit for various CWE Common...
The vulnerability of the OpenJPEG library for image encoding and decoding, related to the pointer to zero, allows a malicious actor to trigger a service failure.
The vulnerability of the OpenJPEG library for image encoding and decoding is related to the assignment of a null pointer in the openjp2/dwt.c file. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
sslscan
This is a tool for scanning SSL/TLS protocols and ciphers on a target server. The tool is called sslscan and is written in C. It is designed to be a command-line interface for scanning SSL/TLS protocols and ciphers on a target server. The tool can be built on various platforms, including Linux an...
Exploit for Out-of-bounds Write in Gnu Glibc
PoC exploit for CVE-2015-0235, a vulnerability in the gethostbyname2r and gethostbynamer functions of the glibc library. The exploit is a shared library wrapper that provides an additional check for the vulnerable functions, preventing them from being called. The target is the glibc library,...
Malicious code in tansuo-c-gaoji-texing (npm)
The package tansuo-c-gaoji-texing was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-c (npm)
The package @zalastax/nolb-lion-c was found to contain malicious code...
Malicious code in @zalastax/nolb-passport-c (npm)
The package @zalastax/nolb-passport-c was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-lib-c (npm)
The package @zalastax/nolb-lion-lib-c was found to contain malicious code...
Malicious code in @zalastax/nolb-async-c (npm)
The package @zalastax/nolb-async-c was found to contain malicious code...
MAL-2025-43133 Malicious code in @zalastax/nolb-async-c (npm)
The package @zalastax/nolb-async-c was found to contain malicious code...
MAL-2025-46237 Malicious code in tansuo-c-gaoji-texing (npm)
The package tansuo-c-gaoji-texing was found to contain malicious code...
MAL-2025-43312 Malicious code in @zalastax/nolb-lion-c (npm)
The package @zalastax/nolb-lion-c was found to contain malicious code...
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
The threat actor behind the malware-as-a-service MaaS framework and loader called CastleLoader has also developed a remote access trojan known as CastleRAT. "Available in both Python and C variants, CastleRAT's core functionality consists of collecting system information, downloading and executin...
CVE-2025-39719: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hwxlate array Fix a potential out-of-bounds array access of the hwxlate array in bno055.c. In bno055getregmask, hwxlate was iterated over the length of the vals array instead of the length of t...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to untrusted library loading due to the GNU C library (CVE-2025-4802)
Summary The GNU C library is used by DataStage on Cloud Pak for Data as part of general processing. Vulnerability Details CVEID:CVE-2025-4802 DESCRIPTION: Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of...
