13575 matches found
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the uclincludecommon function. An attacker can execute arbitrary code or cause a denial of service by supplying crafted input to this function. Remediation A fix was pushed into the master branch but not y...
CVE-2025-11010
A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...
CVE-2025-11010 vstakhov libucl ucl_util.c ucl_include_common heap-based overflow
A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function uclincludecommon of the file /src/uclutil.c. Such manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the...
PT-2025-39631
Name of the Vulnerable Software and Affected Versions libucl versions up to 0.9.2 Description A flaw exists in the ucl include common function within the /src/ucl util.c file. This can lead to a heap-based buffer overflow. Local access is needed for exploitation. The exploit details have been...
Malicious code in @kahoot-frontend/builder-common (npm)
The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...
Malicious Package
Overview @kahoot-frontend/builder-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
MAL-2025-47524 Malicious code in @kahoot-frontend/builder-common (npm)
The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...
Ensure That a Common User Cannot Use pkexec for Privilege Escalation
The pkexec command enables a common user to have the permissions of the superuser or other users. After the authentication is successful, the common user runs the corresponding program with the permissions of the superuser. The pkexec command provides a convenient way for users to change their...
MAL-2025-47516 Malicious code in vault-hux-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in vault-hux-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...
CVE-2025-21484
creationtimestamp| type| source ---|---|--- 2025-09-24 15:53:07+00:00| seen| Telegram/j2l8d6qe1QrgVFL7uh2A01P1R1oUKtw8we6Q5j5mnTiQWU...
Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2025-9031
creationtimestamp| type| source ---|---|--- 2025-09-24 08:51:38+00:00| seen| Telegram/2Q6hg8sCOLJnllunR2uxdjJCbVbi4ToecJ5LYI9GrXIFYc...
CVE-2025-7414
creationtimestamp| type| source ---|---|--- 2025-09-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-09-24 2025-10-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-10-01 2025-10-02 00:00:00+00:00| seen| The Shadowserver...
Security update for frr
This update for frr fixes the following issues: CVE-2024-55553: excessive resource consumption may lead to denial of service due to repeated RIB revalidation when processing several RPKI updates bsc1235237. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
PT-2025-39074
🔵 Ammonia, Mutation XSS, CVE-2025-42581 Low https://t.co/YUWArRZLdF...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, octo-sts, dagdotdev, gitsign, container-object-storage-interface, bank-vaults, gostatsd, local-path-provisioner, kserve-rest-proxy, sftpgo-plugin-pubsub, checksec, rancher-machine, confluent-common-docker, terraform-provider-time,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, octo-sts, dagdotdev, gitsign, container-object-storage-interface, bank-vaults, gostatsd, local-path-provisioner, kserve-rest-proxy, sftpgo-plugin-pubsub, checksec, rancher-machine, confluent-common-docker, terraform-provider-time,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, karma-fips, modelmesh-runtime-adapter, custom-pod-autoscaler-operator, stakater-reloader, newrelic-nri-statsd, openbao-k8s-fips, nemo, rancher-machine, sftpgo-plugin-geoipfilter, blobfuse2, karpenter-fips,...