CVE-2025-3376

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component CONF Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-3376

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component CONF Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-3376

CVE-2025-3376 affects PCMan FTP Server 2.0.7 in the CONF Command Handler. The vulnerability stems from a buffer overflow caused by insufficient validation of input length/size, enabling remote exploitation. Public advisories describe remote initiation and potential impact, with multiple sources n...

CVE-2025-3376 PCMan FTP Server CONF Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component CONF Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

PT-2025-15272 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been identified in the CONF Command Handler component of the affected software, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Serv...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an unsafe read of MSRFAM10HMMIOCONFBASE...

PT-2025-12690 · H3C · H3C Magic Nx400 +1

Name of the Vulnerable Software and Affected Versions: H3C Magic NX30 Pro and Magic NX400 up to V100R014 Description: A critical vulnerability has been found in the unknown code of the file /api/wizard/getNetworkConf, which leads to command injection. The attack can be initiated remotely. The...

Vulnerability of the null_validate_conf() function (drivers/block/null_blk/main.c) in the Linux operating system kernel, allowing a hacker to trigger a service failure

The vulnerability of the nullvalidateconf function drivers/block/nullblk/main.c in the Linux kernel is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

OSV-2025-133 Stack-buffer-overflow in se_read_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396958482 Crash type: Stack-buffer-overflow READ 1 Crash state: sereadconf runconfighandler snmpconfigwhen...

Malicious code in another-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-56627

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbdvfsstreamread An offset from client could be a negative value, It could lead to an out-of-bounds read from the streambuf. Note that this issue is coming when setting 'vfs objects = streamsxat...

DEBIAN-CVE-2024-56626

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbdvfsstreamwrite An offset from client could be a negative value, It could allows to write data outside the bounds of the allocated buffer. Note that this issue is coming when setting 'vfs...

CVE-2024-51366

An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file...

CVE-2024-51366

An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file...

PT-2024-34610 · Omegat · Omegat

Name of the Vulnerable Software and Affected Versions: OmegaT version 6.0.1 Description: The issue allows attackers to execute arbitrary code via uploading a crafted .conf file, exploiting an arbitrary file upload vulnerability in the component RoamingOmega. Recommendations: For OmegaT version...

CVE-2024-51366

An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file...

container-tools:ol8 security update

aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common 1-82.0.1 - Updated removed references Orabug: 33473101 Alex Burmashev - Adjust registries.conf Nikita Gerasimov - remove references to RedHat registry Nikita Gerasimov container-selinux criu crun fuse-overlay...

Ruijie Networks NBR3000D-E 安全漏洞

Ruijie Networks NBR3000D-E is a gateway from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks NBR3000D-E that stems from the /tool/shell/postgresql.conf component containing an information disclosure issue...

PT-2024-31189 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...

Malicious code in eslint-module-conf (npm)

The package contains the BeaverTail infostealer malware associate with DPRK threat actors. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ba9b08d4ba893169691f9b674d05dc209e43e0932a266fbac6479a5e1dc398 Any computer that has this package installed or running should...