CVE-2025-53891

The CVE-2025-53891 entry affects the TIME LINE website (repository: timelineofficial/Time-Line-) where uploaded files (instruction/media) are not strictly validated for type/size. The root cause is insufficient validation, allowing renamed or oversized files that can cause malicious file uploads,...

The vulnerability of the formSetMacFilterCfg() function (/goform/setMacFilterCfg) in the Tenda AC1206 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formSetMacFilterCfg function /goform/setMacFilterCfg of the Tenda AC1206 router’s microprogramming software is related to the issue where the operation’s output escapes the buffer and enters memory when processing the deviceList parameter. Exploiting this vulnerability...

The vulnerability of the fromPptpUserSetting() function (/goform/PPTPUserSetting) in the Tenda FH1202 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the fromPptpUserSetting function /goform/PPTPUserSetting in the Tenda FH1202 router microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the delno parameter. Exploiting this vulnerability allows a malicious actor t...

The vulnerability of the frmL7ProtForm()/goform/L7Prot function in the microprogramming software for Tenda FH1201 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the frmL7ProtForm/goform/L7Prot function in the Tenda FH1201 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitra...

The vulnerability of the fromRouteStatic() function (/goform/fromRouteStatic) in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the fromRouteStatic function /goform/fromRouteStatic in the Tenda FH1201 router software lies in the fact that the operation escapes the buffer boundaries and is stored in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause servic...

The vulnerability of the COMP_DUMMY() function in the sound module/soc/mediatek/mt8195/mt8195-mt6359.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the COMPDUMMY function in the sound/soc/mediatek/mt8195/mt8195-mt6359.c file of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

The vulnerability of the `addImage` method in the library for creating PDF files (jsPDF) allows a hacker to induce a service failure.

The vulnerability of the addImage method in the library used for creating PDF files by jsPDF is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by uploading a payload to the server...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

A buffer overflow vulnerability exists in Ivanti Avalanche Manager before version 6.4.1 . The root cause is the program's failure to properly manage memory allocation and release when processing data. An unauthenticated attacker could exploit this flaw to cause service disruption or achieve arbit...

CVE-2023-38036: Buffer Copy without Checking Size of Input

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.51.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

CVE-2025-3933

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

CVE-2025-3933 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

CVE-2025-3933 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

CVE-2025-3933 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

Denial Of Service (DoS)

github.com/babylonlabs-io/babylon is vulnerable to Denial Of Service DoS. The vulnerability is due to sending a message that modifies the validator set exactly at the epoch boundary, which allows an attacker to halt the blockchain by disrupting consensus progression...