USN-8092-1: Sudo vulnerability

It was discovered that Sudo incorrectly checked return codes when dropping privileges to run the mailer. A local attacker could possibly use this issue to escalate privileges...

CLSA-2026-1771237525 Fix CVE(s): CVE-2025-69419

SECURITY UPDATE: check return code of UTF8putc - debian/patches/CVE-2025-69419.patch: add missing return code checks for UTF8putc in astrex.c and OPENSSLuni2utf8 in p12utl.c. - CVE-2025-69419...

EUVD-2022-54824

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

EUVD-2025-15913

Malicious code in bioql PyPI...

EUVD-2024-3190

Malicious code in bioql PyPI...

EUVD-2025-11263

Malicious code in bioql PyPI...

CVE-2025-21935

In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rioaddnet in rioscanallocnet The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and give up the reference initialized in rioaddnet...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56596)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56596 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in...

CVE-2024-56596

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfsreaddir The stbl might contain some invalid values. Added a check to return error code in that case...

CVE-2024-53061 media: s5p-jpeg: prevent buffer overflows

In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word ...

SUSE CVE-2017-2579

An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution...

launchProjectFor() does not check the address of _owner

Lines of code Vulnerability details Impact launchproject can be launchProject in launchProjectFor, but the entire process does not check the validity of owner, not even JBController.sol. This will enable owner to be specified as address0. This will enable projects to be created without an owner,...

NestedFactory.sol#_submitInOrders() Wrong implementation cause users to be overcharged

Handle WatchPug Vulnerability details When executing orders, the actual amountSpent + feesAmount can be lower than inputTokenAmount, the unspent amount should be returned to the user. However, in the current implementation, the unspent amount will be taken as part of the fee. function...

Leaked? - A Checking Tool For Hash Codes And Passwords Leaked

Leaked? is A Checking tool for Hash codes and Passwords leaked, use API from @webtobesocial. Leaked? can work in any OS if they have support Python 3 Features Check passwords leaked Check hash code leaked Exit About Author Install and Run in Linux sudo apt update && apt install python3 python3-pi...

Hangzhou Dana Technology Co., Ltd. Shape and Color APP has arbitrary account login vulnerability

Shape and Color is a new app for identifying flowers and sharing nearby flowers launched by Hangzhou Dana Technology Co. An arbitrary account login vulnerability exists in the Shape and Color APP of Hangzhou Dana Technology Co. The vulnerability is due to the failure of the server side to...

Privilege Control Vulnerability in Multiple Huawei Phones

The Honor 8, Honor V8, Honor 9, Honor V9, Enjoy 7 Plus, P9, P10 Plus, Nova 2, and Nova 2 Plus are a smartphone from the Chinese company Huawei Huawei. Several Huawei phones have a privilege control vulnerability. An attacker who gains system privileges in the phone can use the vulnerability to...

CVE-2004-2396

passwd 0.68 does not check the return code for the pamstart function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM...