2323 matches found
CVE-2025-40240 sctp: avoid NULL dereference when chunk data buffer is missing
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk-skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk-skb can only be NULL if chunk-headskb is not. Check for fraglist instead...
Exploit for CVE-2025-55182
CVE-2025-55182 - React Server Components RCE NOTE: Written b...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the RemoveChunk function and the FileMd5 parameter. An attacker can remove arbitrary files and folders from the server by supplying crafted input. Details A Directory Traversal attack also known as path traversal...
python-kdcproxy: Remote DoS via unbounded TCP upstream buffering
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...
Security Bulletin: Netty LF-Only Chunk Terminator Flaw Enables HTTP Request Smuggling (Fixed in 4.1.125/4.2.5)
Summary Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters LF as a chunk-size li...
EUVD-2025-175352
Malicious code in vite-chunk-master npm...
MAL-2025-190176 Malicious code in vite-chunk-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa857f9f07f371efc55f392a0fcf81beea9480a42476b38fe80cf496b37ba8d The package vite-chunk-master was found to contain malicious code. Source: ghsa-malware...
Malicious code in vite-chunk-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa857f9f07f371efc55f392a0fcf81beea9480a42476b38fe80cf496b37ba8d The package vite-chunk-master was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview vite-chunk-master is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview vite-smart-chunk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in vite-smart-chunk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1 The package vite-smart-chunk was found to contain malicious code. Source: ghsa-malware 87ee583206ce0948a7c052ee600515c370f53dffe893e50730ff8ad8f353e2...
EUVD-2025-37951
Malicious code in vite-smart-chunk npm...
MAL-2025-49372 Malicious code in vite-smart-chunk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1 The package vite-smart-chunk was found to contain malicious code. Source: ghsa-malware 87ee583206ce0948a7c052ee600515c370f53dffe893e50730ff8ad8f353e2...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: In blkstacklimits, we check that the t-chunksectors value is a multiple of the t-physicalblocksize value. However, by determining the chunksectors value in bytes, it is possible to overflow the unsigned int variable that stores...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpucspass1 Since the gangsize check is outside of chunk parsing loop, we need to reset i before we free the chunk data. Suggested by Ye Zhang @VAR10CK of Baidu Security...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Incorrect Calculation of Buffer Size (CVE-2024-50299)
In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctpsfootb This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
CVE-2025-59463
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers...
CVE-2025-59463
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers...
