3729 matches found
CVE-2025-21607
Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover 0x1 and Identity 0x4, the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall executi...
Vyper Does Not Check the Success of Certain Precompile Calls
Summary When the Vyper Compiler uses the precompiles EcRecover 0x1 and Identity 0x4, the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall execution continue. Then the execution result can be...
Vyper 安全漏洞
Vyper is a Pythonic smart contract language for EVM open sourced by vyperlang. A security vulnerability exists in Vyper 0.4.0 and earlier versions, which stems from the compiler failing to check the success flag of a call when using pre-compiled EcRecover and Identity, which could lead to incorre...
Exploit for Improper Initialization in Linux Linux_Kernel
It is an offensive tool for Linux. The repository appears to be...
Arbitrary Code Execution
Jinja is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper handling in the compiler caused by a bug that allows an attacker controlling both the content and filename of a template to execute arbitrary Python code, regardless of whether Jinja's sandbox is used...
Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`
The VariantStrIter::implget function called internally by implementations of the Iterator and DoubleEndedIterator traits for this type was unsound, resulting in undefined behaviour. An immutable reference &p to a mut libc::cchar pointer initialized to NULL was passed as an argument to a C functio...
Jinja 安全漏洞
Jinja is a fast, expressive and extensible template engine open-sourced by Pallets. A security vulnerability exists in Jinja versions prior to 3.1.5, which stems from a compiler bug that allows an attacker who has control over both the template content and filename to execute arbitrary Python cod...
Amazon Linux 2022 : libsepol, libsepol-devel, libsepol-static (ALAS2022-2022-030)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-030 advisory. The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-36084 The CIL compiler in SELinux 3.2 has a...
Malicious code in plugin-compiler-bytedance (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11421 Malicious code in plugin-compiler-bytedance (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in complier (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11333 Malicious code in complier (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11332 Malicious code in compilre (npm)
--- -= Per source details. Do not edit below this line.=-...
Undefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`
An issue was identified in the VmFd::createdevice function, leading to undefined behavior and miscompilations on rustc 1.82.0 and newer due to the function's violation of Rust's pointer safety rules. The function downcasted a mutable reference to its struct kvmcreatedevice argument to an immutabl...
vue-i18n has cross-site scripting vulnerability with prototype pollution
Vulnerability type XSS Description vue-i18n can be passed locale messages to createI18n or useI18n. we can then translate them using t and $t. vue-i18n has its own syntax for local messages, and uses a message compiler to generate AST. In order to maximize the performance of the translation...
The vulnerability of oneAPI DPC++/C++ compiler’s optimization compilers, related to an uncontrolled element in the search process, allows attackers to increase their privileges.
The vulnerability of oneAPI DPC++/C++ compiler optimizers is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Intel Fortran Compiler Classic’s optimization compiler is related to an uncontrolled search path element, which allows a malicious actor to exploit their privileges.
The vulnerability of the Intel Fortran Compiler Classic optimization compiler is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Intel High Level Synthesis Compiler software lies in its uncontrolled search path, which allows attackers to exploit their privileges.
The vulnerability of Intel High Level Synthesis Compiler software is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-44308
A vulnerability was discovered in WebKitGTK's JIT compiler. Processing maliciously crafted web content may lead to arbitrary code execution. Mitigation Affected installations of Red Hat Enterprise Linux 7 can disable the JIT engine by setting the JavaScriptCoreUseJIT environment variable to 0...
Intel oneAPI Base Toolkit < 2024.2.0 Multiple Vulnerabilities
Multiple vulnerabilities exist in Intel oneAPI Base Toolkit versions prior to 2024.2.0. See vendor advisory for more details. - Uncontrolled search path for some Intel® Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of...