UBUNTU-CVE-2025-68180

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odmcombinesegments When a connector is connected but inactive e.g., disabled by desktop environments, pipectx-streamres.tg will be destroyed. Then, reading odmcombinesegments causes kern...

CVE-2025-68180

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odmcombinesegments When a connector is connected but inactive e.g., disabled by desktop environments, pipectx-streamres.tg will be destroyed. Then, reading odmcombinesegments causes kern...

CVE-2025-68180 drm/amd/display: Fix NULL deref in debugfs odm_combine_segments

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odmcombinesegments When a connector is connected but inactive e.g., disabled by desktop environments, pipectx-streamres.tg will be destroyed. Then, reading odmcombinesegments causes kern...

CVE-2025-68180 drm/amd/display: Fix NULL deref in debugfs odm_combine_segments

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odmcombinesegments When a connector is connected but inactive e.g., disabled by desktop environments, pipectx-streamres.tg will be destroyed. Then, reading odmcombinesegments causes kern...

CLSA-2025-1764868919 poppler: Fix of CVE-2025-32365

CVE-2025-32365: prevent out-of-bounds reads in JBIG2Bitmap::combine function in JBIG2Stream.cc...

Prototype Pollution

magix-combine-ex is vulnerable to Prototype Pollution. The vulnerability is due to improper input validation in the util-deps.addFileDepend function, which allows an attacker to inject malicious properties into Object.prototype, leading to denial of service DoS or other unexpected behavior...

CLSA-2025-1761261363 poppler: Fix of CVE-2025-32365

CVE-2025-32365: prevent out-of-bounds reads in JBIG2Bitmap::combine function in JBIG2Stream.cc...

EUVD-2019-5515

Malware in sbrugna...

EUVD-2023-41645

Malicious code in bioql PyPI...

EUVD-2025-31056

Malicious code in bioql PyPI...

EUVD-2024-53136

Malicious code in bioql PyPI...

CVE-2025-57321

A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum consequence...

Prototype Pollution

Overview magix-combine-ex is a 合并Magix View的html,js,css成一个js文件 Affected versions of this package are vulnerable to Prototype Pollution via the util-deps.addFileDepend function. An attacker can inject arbitrary properties into Object.prototype by supplying a crafted payload, potentially causing...

GHSA-CR7H-93FH-WHWM magix-combine-ex vulnerable to prototype pollution

A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions through 2.2.2 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum consequence...

magix-combine-ex vulnerable to prototype pollution

A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions through 2.2.2 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum consequence...

CVE-2025-57321

A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum consequence...

CVE-2025-57321

The magix-combine-ex library (versions through 1.2.10 , and potentially through 2.2.2 per some reports) is vulnerable to a Prototype Pollution vulnerability in the util-deps.addFileDepend function. This issue arises from improper input validation , allowing an attacker to inject arbitrary propert...

CVE-2025-57321: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum consequence...

magix-combine 安全漏洞

magix-combine is a js library from thx open source. A security vulnerability exists in magix-combine 1.2.10 and earlier versions, which stems from prototype contamination in the util-deps.addFileDepend function, which could lead to a denial-of-service attack...

CVE-2025-57321

A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum consequence...