12996 matches found
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
...
ipc: fix to protect IPCS lookups using RCU
...
NFC: nci: uart: Set tty->disc_data only in success path
...
CVE-2025-54799 Lego does not enforce HTTPS
Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...
PT-2025-32264
Name of the Vulnerable Software and Affected Versions OpenVPN Access Server affected versions not specified Description The vulnerability allows an attacker to perform JavaScript injection via the SAML relaystate. This could potentially lead to Remote Code Execution RCE. Recommendations At the...
Flexibits Fantastical 安全漏洞
Flexibits Fantastical is a cross-platform calendar and task manager from Flexibits, Inc. A security vulnerability exists in Flexibits Fantastical that stems from the XPC service not implementing proper client-side authorization checks, which could result in a local, unprivileged process accessing...
Quantum Circuit Benchmarking on IBM Brisbane: Performance Insights from Superconducting Qubit Models
This paper investigates quantum communication using superconducting qubits, emphasizing the simulation and control of quantum systems via IBM Brisbane quantum processor. We focus on implementing fundamental quantum gates and analyzing the evolution of entangled states, which are essential for...
Linux Distros Unpatched Vulnerability : CVE-2024-26825
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: free rxdatareassembly skb on NCI device cleanup rxdatareassembly skb is stored during NCI data exchange for processing fragmented packets. It is dropp...
Malicious code in google-webfonts-helper (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba7d8c4c4151033fdccecb7ed439075f6c8eb39490462dd7b25aac68d2a22482 The OpenSSF Package Analysis project identified...
Malicious code in adminarmorproject (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in nova-state (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6850 Malicious code in nova-state (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6838 Malicious code in gik2 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in lynx-libs-mono (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dcde725ba12b559bfd1e62b8d6058ced4b0a5ed11b9f168f8f6f576b42ef801 The OpenSSF Package Analysis project identified 'lynx-libs-mono' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...
CVE-2025-41659
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted...
CVE-2025-27071
Memory corruption while processing specific files in Powerline Communication Firmware...
CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
CVE-2025-47324
CVE-2025-47324 is linked to Qualcomm chipset firmware (notably Snapdragon QCA7005 family) and concerns information disclosure when accessing and modifying the PIB file over powerline. The connected documents provide limited technical detail beyond this behavior; no explicit root-cause or concrete...