Linux Distros Unpatched Vulnerability : CVE-2025-38033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/Kconfig: make CFIAUTODEFAULT depend on !RUST or Rust = 1.88 Calling core::fmt::write from rust code while FineIBT is enabled results in a kernel panic:...

Linux Distros Unpatched Vulnerability : CVE-2024-31852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an...

Zoom Clients for iOS Information Disclosure Vulnerability

Zoom Clients for iOS is Zoom's official video conferencing app for iOS devices e.g., iPhone, iPad, supporting meeting convening, screen sharing, chatting and other features for business office, distance learning and other scenarios. Zoom Clients for iOS has an information leakage vulnerability,...

The vulnerability of Zoom’s video conferencing software, related to the implementation of incorrect control flow, allows attackers to disclose protected information.

The vulnerability of Zoom video conferencing software is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

[SECURITY] [DLA 4246-1] libowasp-esapi-java security update

Debian LTS Advisory DLA-4246-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 22, 2025 https://wiki.debian.org/LTS Package : libowasp-esapi-java Version : 2.4.0.0-0+deb11u1 CVE ID : CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Debian Bug : 1010339 1109378...

glibc: Vector register overwrite bug in glibc

A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...

CVE-2025-49463

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49463

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49463

CVE-2025-49463 affects Zoom Clients for iOS, with versions prior to 6.4.5 vulnerable to information disclosure due to insufficient control flow management. The flaw can be triggered by an unauthenticated user via network access. Remediation: update Zoom Clients for iOS to version 6.4.5 or later. ...

Zoom Clients for iOS 安全漏洞

Zoom Clients for iOS is Zoom's official video conferencing app for iOS devices e.g., iPhone, iPad, supporting meeting convening, screen sharing, chatting and other features for business office, distance learning and other scenarios. Zoom Clients for iOS has an information leakage vulnerability,...

CVE-2025-38291: Always-Incorrect Control Flow Implementation

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the following kernel call trace when a firmware crash occurs. This happens because the host sends WMI commands to the firmware...

Disa: Accurate Learning-Based Static Disassembly with Attentions

For reverse engineering related security domains, such as vulnerability detection, malware analysis, and binary hardening, disassembly is crucial yet challenging. The fundamental challenge of disassembly is to identify instruction and function boundaries. Classic approaches rely on file-format...

PotentRegion4MalDetect: Advanced Features from Potential Malicious Regions for Malware Detection

Malware developers exploit the fact that most detection models focus on the entire binary to extract the feature rather than on the regions of potential maliciousness. Therefore, they reverse engineer a benign binary and inject malicious code into it. This obfuscation technique circumvents the...

CVE-2025-40741

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 5. The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files. This could allow an attacker to execute code in the context of the current process...

PT-2025-29110 · Zoom · Zoom Clients For Ios

Name of the Vulnerable Software and Affected Versions: Zoom Clients for iOS versions prior to 6.4.5 Description: Insufficient control flow management in certain Zoom Clients for iOS may allow an unauthenticated user to conduct a disclosure of information via network access. Recommendations: Updat...

PT-2025-37235

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue related to control flow integrity CFI. A type punning issue within the acomp component could lead to a crash when CFI is enabled. The resolution...

glibc: Vector register overwrite bug in glibc

A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...

CVE-2025-6543

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

CVE-2025-6543

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

CVE-2025-6543 Memory overflow vulnerability leading to unintended control flow and Denial of Service

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...