52 matches found
PT-2026-116708
In the Linux kernel, the following vulnerability has been resolved: net: atl1c: fix soft lockup on out-of-range tpd cons read The hardware can report an out-of-range tpd cons seen as 0xffff while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would...
PT-2026-94506
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the m68k nfcon component. The show cons active function calls the .device method while holding the console list lock. Because the nfcon device function subsequently...
CVE-2026-49416
The vt(4) system console driver in FreeBSD contains an integer overflow vulnerability in the CONS_HISTORY ioctl handler. When a large history size is requested, an integer overflow occurs during buffer size calculation, leading to a smaller heap allocation. Subsequent buffer initialization result...
CVE-2026-49416 Integer overflow in vt(4) CONS_HISTORY ioctl
The CONSHISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation, resulting in a heap allocation smaller than expected. Subsequent initialization of the buffer wrote beyond the end of the allocation. An...
EUVD-2026-39960
The CONSHISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation, resulting in a heap allocation smaller than expected. Subsequent initialization of the buffer wrote beyond the end of the allocation. An...
PT-2026-53065
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The CONS HISTORY ioctl handler fails to properly validate the requested history size. Providing a large value leads to an integer overflow during the buffer size...
FreeBSD-SA-26:34.vt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:34.vt Security Advisory The FreeBSD Project Topic: Integer overflow in vt4 CONSHISTORY ioctl Category: core Module: vt Announced: 2026-06-09 Credits: Ed Mast...
FreeBSD -- Integer overflow in vt(4) CONS_HISTORY ioctl
Problem Description: The CONSHISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation, resulting in a heap allocation smaller than expected. Subsequent initialization of the buffer wrote beyond the end of...
LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash
Summary LiquidJS's memoryLimit security mechanism can be completely bypassed by using reverse range expressions e.g., 100000000..1, allowing an attacker to allocate unlimited memory. Combined with a string flattening operation e.g., replace filter, this causes a V8 Fatal error that crashes the...
EUVD-2023-12166
Malicious code in bioql PyPI...
Malware in nf-cons-log
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-6186 Malicious code in nf-cons-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e638446c9e65c64ab2f4781b57b182ae1de4c1da746270215e07e09992fc954e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nf-cons-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e638446c9e65c64ab2f4781b57b182ae1de4c1da746270215e07e09992fc954e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2025-5641
A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function rconsisbreaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local...
SUSE CVE-2025-5643
A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function consstackload in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The...
Radare2 buffer error vulnerability
Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from the mishandling of the parameter -T by the function consstackload in the component radare2, which could lead to memory corruption...
PT-2025-23901 · Radare2 · Radare2
Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problematic vulnerability was found in the function cons stack load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack must...
CVE-2024-30556
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MightyThemes Mighty Classic Pros And Cons allows Stored XSS.This issue affects Mighty Classic Pros And Cons: from n/a through 2.0.9...
CVE-2023-0065
The i2 Pros & Cons WordPress plugin through 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
