CVE-2025-26265

This CVE (CVE-2025-26265) affects openairinterface5g v2.1.0. The underlying issue is a segmentation fault triggered during handling of a crafted UE Context Modification response, which can cause a Denial of Service. The connected records consistently describe a segmentation fault as the root caus...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from perf not using RCU protection for context iteration, which could lead to data contention...

The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the smb component in the Linux operating system’s kernel is related to improper error handling in the smb3reconfigure function in fs/smb/client/fscontext.c. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from octeontx2-pf's misuse of GFPKERNEL in an atomic context...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process bsc1239547. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2025:1023-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process bsc1239547...

Malicious code in @mint-lib/routing-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df96fcfd4afed289291f55c411b10293b85a52d658e3f35b74cc4969fc30df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

...

PT-2025-16683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a bounds check for durable handle context in ksmbd. The issue was related to a missing bounds check for durable handle...

CVE-2025-2643

creationtimestamp| type| source ---|---|--- 2025-03-23 09:30:20+00:00| published-proof-of-concept| Telegram/GOxCG1BjflWilOJhCsGD03vvXqezG6y0qQYjqtBBlBLw 2025-03-23 11:28:10+00:00| seen| https://t.me/cvedetector/20895 2025-03-23 12:04:09+00:00| seen|...

SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2025:0975-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0975-1 advisory. - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process bsc1239547. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2025:0975-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process bsc1239547...

The vulnerability of the nvidia_smmu_context_fault() function in the drivers/iommu/arm/arm-smmu/arm-smmu-nvidia.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the nvidiasmmucontextfault function in the drivers/iommu/arm/arm-smmu/arm-smmu-nvidia.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-8556

A stored cross-site scripting XSS vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string run ID is appended and rendered as HTML. This allows ...

CVE-2024-8556 Stored XSS in modelscope/agentscope

A stored cross-site scripting XSS vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string run ID is appended and rendered as HTML. This allows ...

CVE-2024-8400 Stored XSS in gaizhenbiao/chuanhuchatgpt

A stored cross-site scripting XSS vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability allows an attacker to upload a malicious HTML file containing JavaScript code, which is then executed when the file is accessed. This can lead to the execution of arbitrar...

podman: Build Context Bind Mount

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

The vulnerability of the bpf_ctx_narrow_access_offset() function in the include/linux/filter.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the bpfctxnarrowaccessoffset function in the include/linux/filter.h module of the Linux kernel is related to the copying of a buffer without checking its size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system failure...

Data Leaks and AI Agents: Why Your APIs Could Be Exposing Sensitive Information

Most organizations are using AI in some way today, whether they know it or not. Some are merely beginning to experiment with it, using tools like chatbots. Others, however, have integrated agentic AI directly into their business procedures and APIs. While both types of organizations are undoubted...