827 matches found
EUVD-2025-21179
Malicious code in bioql PyPI...
EUVD-2023-29836
Malicious code in bioql PyPI...
EUVD-2023-30063
Malicious code in bioql PyPI...
EUVD-2024-36229
Malicious code in bioql PyPI...
Rockwell Automation 1756-ENT2R、1756-EN4TR和1756-EN4TRXT 安全漏洞
The Rockwell Automation 1756-ENT2R is an Ethernet communication module from Rockwell Automation, Inc. A security vulnerability exists in the Rockwell Automation 1756-ENT2R, 1756-EN4TR, and 1756-EN4TRXT that originates from a specially crafted message that causes the device to crash...
Linux Distros Unpatched Vulnerability : CVE-2023-28686
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can...
PT-2025-34213 · Exagrid · Exagrid Ex10
Name of the Vulnerable Software and Affected Versions: Exagid EX10 version 7.0.1p02 Description: An XML external entities XXE injection vulnerability exists in the /init API endpoint. An authenticated, unprivileged attacker can achieve information disclosure and privilege escalation by submitting...
Linux Distros Unpatched Vulnerability : CVE-2018-1257
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSock...
CVE-2025-53948
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required...
CVE-2024-42645
An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service DoS...
CVE-2025-36512
A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message...
CVE-2025-35966
A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to...
CVE-2025-36512
A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message...
CVE-2024-42649
NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...
mvfst 安全漏洞
mvfst is a Meta open source client and server-side implementation of the IETF QUIC protocol. A security vulnerability exists in versions prior to mvfst v2025.07.07.00 that stems from a heap buffer overflow that can be caused by a specially crafted message in a QUIC session...
CVE-2025-48706
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot...
CVE-2025-48705
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to reboot...
CVE-2024-33782
MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...
CVE-2024-33781
MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::getbytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...