Astra Linux - уязвимость в thunderbird

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...

EUVD-2025-37213

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-52664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users...

The vulnerability of the nfs_mountreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the nfsmountreply function in the net/nfs.c component of the U-Boot loader is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the nfs_lookupreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfslookupreply function in the net/nfs.c component of the U-Boot loader is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the __mptcp_update_wmem() function in the net/mptcp/protocol.c module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the mptcpupdatewmem function in the net/mptcp/protocol.c module of the Linux kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access protected information or cause service failure...

The vulnerability of the cifs_sg_set_buf() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifssgsetbuf function in the Linux operating system is related to memory management errors after memory is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the AdvSetMacMtuWan() function in the microprogramming software for Tenda AC6 allows a hacker to trigger a service failure.

The vulnerability of the AdvSetMacMtuWan function in the Tenda AC6 router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted HTTP request...

CVE-2025-52664

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users...

CVE-2025-52664

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users...

CVE-2025-34284

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

Salt Typhoon APT Group: What Public Sector Leaders and Defenders Should Know

The Rapid7 Threat Focus: Salt Typhoon report profiles one of the most sophisticated and persistent state-sponsored threat actors operating today. Salt Typhoon, a Chinese espionage advanced persistent threat APT group linked to the Ministry of State Security MSS, has spent years infiltrating globa...

The State of Agentic AI: Disrupting Publishing and Reshaping Ecommerce

Learn how agentic AI is transforming how users and automation interact with the web — changing how people shop, search, and consume content...

The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility, related to writing beyond buffer boundaries in memory, allows a malicious actor to cause a service failure.

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the formAdvFirewall() function in D-Link DIR600L router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formAdvFirewall function in the microprogramming software for D-Link DIR600L routers is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to caus...

The vulnerability of the crypto-x509 component in the Go programming language, which allows a perpetrator to trigger a service failure

The vulnerability of the crypto-x509 component in the Go programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility lies in the use of the sizeof() function for pointers, which allows an attacker to trigger a service failure.

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to the use of the sizeof function on pointer types. Exploiting this vulnerability allows a malicious actor to cause service interruptions...