The vulnerability of the calculate_sizes() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the calculatesizes function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the writing of buffers outside of the system’s protected area. Exploiting this vulnerability could allow an attacker to damage memory resources or cause service...

Command Injection

Overview cli-onprem is a CLI tool for infrastructure engineers Affected versions of this package are vulnerable to Command Injection due to the use of shell-invoked subprocess calls with unvalidated input. An attacker can execute arbitrary commands by injecting shell metacharacters in the directo...

EUVD-2018-11192

Malware in sbrugna...

EUVD-2018-12764

Malware in sbrugna...

EUVD-2021-19288

Malware in sbrugna...

EUVD-2025-6967

Malicious code in bioql PyPI...

EUVD-2025-13774

Malicious code in bioql PyPI...

CVE-2025-10974

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974 giantspatula SewKinect Endpoint calculate pickle.loads deserialization

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974 giantspatula SewKinect Endpoint calculate pickle.loads deserialization

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974

The CVE-2025-10974 entry concerns giantspatula SewKinect Endpoint.calculate where the vulnerable code path uses pickle.loads on the argument body_parts/point_cloud, enabling deserialization. Affects the Endpoint calculate file; remote manipulation is possible and the exploit has been publicly dis...

PT-2025-39458

Name of the Vulnerable Software and Affected Versions giantspatula SewKinect versions prior to 7fd963ceb3385af3706af02b8a128a13399dffb1 Description A flaw exists in giantspatula SewKinect that allows for remote manipulation. The issue stems from the pickle.loads function within the /calculate fil...

Linux Distros Unpatched Vulnerability : CVE-2018-20197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2...

Linux Distros Unpatched Vulnerability : CVE-2018-19503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in...

Cross-site Scripting (XSS)

Overview mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the calculateMathMLDimensions function, which was introduced in 5c69e5f. An attacker can execute...

GHSA-7RQQ-PRVP-X9JH Mermaid improperly sanitizes sequence diagram labels leading to XSS

Summary In the default configuration of mermaid 11.9.0, user supplied input for sequence diagram labels is passed to innerHTML during calculation of element size, causing XSS. Details Sequence diagram node labels with KaTeX delimiters are passed through calculateMathMLDimensions. This method pass...

CVE-2025-7128

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculatepayroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

SUSE CVE-2018-20196

There is a stack-based buffer overflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because the SM array is mishandled...

OSV-2025-357 Segv on unknown address in pcpp::Packet::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416808618 Crash type: Segv on unknown address Crash state: pcpp::Packet::computeCalculateFields FuzzTarget.cpp...