AZL-68190 CVE-2025-7493 affecting package 389-ds-base 3.1.1-10

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA...

CVE-2025-61792

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of in order the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode into local administrative access. NOTE: the reporter indicate...

CVE-2025-61792

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of in order the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode into local administrative access. NOTE: the reporter indicate...

PT-2025-40032

Name of the Vulnerable Software and Affected Versions Quadient DS-700 iQ devices through 2025-09-30 Description Quadient DS-700 iQ devices may experience a race condition when quickly clicking the Question Mark button, the Help Button, the About button, and the Help Button in sequence. This can...

CVE-2025-61792

Quadient DS-700 iQ devices up to 2025-09-30 may have a race condition when rapidly clicking the sequence of Question Mark → Help → About → Help, which could exit kiosk mode to local administrative access. The issue is described as sporadic during limited testing, with no exploits or detailed vect...

Quadient DS-700 iQ 竞争条件问题漏洞

The Quadient DS-700 iQ is an automated envelope sealer device from Quadient, France. A Competitive Condition Issue vulnerability exists in the Quadient DS-700 iQ version 2025-09-30 and earlier, which originates from a competitive condition that exists when clicking the Question Mark button, the...

UBUNTU-CVE-2022-50411

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix error code path in acpidscallcontrolmethod A use-after-free in acpipsparseaml after a failing invocaion of acpidscallcontrolmethod is reported by KASAN 1 and code inspection reveals that nextwalkstate pushed to the...

CVE-2022-50411

CVE-2022-50411 concerns the Linux kernel. A use-after-free vulnerability occurs in the ACPI sub-system: after a failed invocation of acpi_ds_call_control_method(), the thread’s next_walk_state is freed but not popped, causing acpi_ps_parse_aml() to obtain an invalid current walk state. The fix ma...

CVE-2022-50411

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix error code path in acpidscallcontrolmethod A use-after-free in acpipsparseaml after a failing invocaion of acpidscallcontrolmethod is reported by KASAN 1 and code inspection reveals that nextwalkstate pushed to the...

Malicious code in @zalastax/nolb-ds_ (npm)

The package @zalastax/nolb-ds was found to contain malicious code...

Malicious code in ds-cmd-line-2e-zh (npm)

The package ds-cmd-line-2e-zh was found to contain malicious code...

Malicious code in apachecn-ds-zh-pt3 (npm)

The package apachecn-ds-zh-pt3 was found to contain malicious code...

Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm)

The package fortnite-free-gi-ft-car-ds-2023 was found to contain malicious code...

MAL-2025-43460 Malicious code in apachecn-ds-zh-pt3 (npm)

The package apachecn-ds-zh-pt3 was found to contain malicious code...

MAL-2025-44077 Malicious code in ds-cmd-line-2e-zh (npm)

The package ds-cmd-line-2e-zh was found to contain malicious code...

MAL-2025-43190 Malicious code in @zalastax/nolb-ds_ (npm)

The package @zalastax/nolb-ds was found to contain malicious code...

MAL-2025-44291 Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm)

The package fortnite-free-gi-ft-car-ds-2023 was found to contain malicious code...

Malicious code in ds-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51f8c8b4f365efe9e19ae3c1f9dc70779556603342c121e189acf9e26fb44edb The OpenSSF Package Analysis project identified 'ds-header' @ 9999.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-42141 Malicious code in ds-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51f8c8b4f365efe9e19ae3c1f9dc70779556603342c121e189acf9e26fb44edb The OpenSSF Package Analysis project identified 'ds-header' @ 9999.0.0 npm as malicious. It is considered malicious because: - The package...

Linux Distros Unpatched Vulnerability : CVE-2018-1089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer...