Lucene search
+L

24409 matches found

Github Security Blog
Github Security Blog
added 2025/06/16 4:09 p.m.49 views

pycares has a Use-After-Free Vulnerability

Summary pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS queries are still pending. This results in a fatal Python error and interpreter crash. Details Root Cause The vulnerability stems from improper handling of callback...

7.5AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/06/16 4:09 p.m.17 views

GHSA-5QPG-RH4J-QP35 pycares has a Use-After-Free Vulnerability

Summary pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS queries are still pending. This results in a fatal Python error and interpreter crash. Details Root Cause The vulnerability stems from improper handling of callback...

8.2CVSS7.5AI score0.00451EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.7 views

TencentOS Server 4: dnsmasq (TSSA-2024:0362)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0362 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS7.4AI score0.01773EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.7 views

TencentOS Server 3: bind and dhcp (TSSA-2024:0227)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0227 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS7AI score0.99988EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.11 views

TencentOS Server 4: aardvark-dns (TSSA-2024:0608)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0608 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS7.1AI score0.00765EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.10 views

TencentOS Server 3: dnsmasq (TSSA-2024:0093)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0093 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS7AI score0.99988EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.3 views

TencentOS Server 3: container-tools:rhel8 (TSSA-2024:0779)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0779 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS7.1AI score0.01414EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.12 views

TencentOS Server 3: bind (TSSA-2023:0093)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0093 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

5.3CVSS6.6AI score0.02195EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.5 views

TencentOS Server 4: unbound (TSSA-2024:0638)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0638 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.5CVSS7AI score0.01349EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.14 views

TencentOS Server 3: dnsmasq (TSSA-2022:0246)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0246 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS6.4AI score0.02479EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.7 views

TencentOS Server 4: unbound (TSSA-2024:0285)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0285 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS6.7AI score0.01743EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.4 views

TencentOS Server 3: bind (TSSA-2023:0287)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0287 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS7.4AI score0.13213EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.14 views

TencentOS Server 2: bind, bind-dyndb-ldap, and dhcp (TSSA-2024:0157)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0157 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

7.5CVSS7AI score0.99988EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/06/15 12:21 a.m.15 views

CVE-2025-45987

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...

9.8CVSS10AI score0.01864EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2025/06/15 12:00 a.m.590 views

Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Windows 11 SMB Client - Privilege Escalation & Remote Code Execution RCE Author: Mohammed Idrees Banyamer Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-06-13 Tested on: Windows 11 version 22H2, Windows Server 2022, Kali Linux...

8.8CVSS8.2AI score0.82699EPSS
SaveExploits7
NVD
NVD
added 2025/06/13 12:15 p.m.20 views

CVE-2025-45987

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...

9.8CVSS0.01864EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/13 12:00 a.m.16 views

LB-LINK多款产品 安全漏洞

LB-LINK BL-X26 and others are products of China Bilink LB-LINK.LB-LINK BL-X26 is a wireless router.LB-LINK BL-LTE300 is a wireless router.LB-LINK BL-AC2100 is a wireless Wi-Fi 6 router. A security vulnerability exists in several LB-LINK products, which stems from a command injection in the dns1 a...

9.8CVSS7.4AI score0.01864EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/06/13 12:00 a.m.32 views

CVE-2025-45987

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...

0.01864EPSS
SaveExploits1References1
CVE
CVE
added 2025/06/13 12:00 a.m.73 views

CVE-2025-45987

This CVE affects Blink router models: BL-WR9000 (v2.4.9), BL-AC2100 AZ3 (v1.0.4), BL-X10 AC8 (v1.0.5), BL-LTE300 (v1.2.3), BL-F1200 AT1 (v1.0.0), BL-X26 AC8 (v1.2.8), BLAC450M AE4 (v4.0.0), and BL-X26 DA3 (v1.2.7). The issue is multiple command injection in the bs_SetDNSInfo function via dns1 and...

9.8CVSS8.2AI score0.01864EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/13 12:00 a.m.9 views

CVE-2025-45987

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...

10AI score0.01864EPSS
SaveExploits1References1
Rows per page
Query Builder