AZL-10925 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

UBUNTU-CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

CVE-2021-43309

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

CVE-2021-43309

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the expandmmacparams function in modules/preprocs/nasm/nasm-pp.c. Remediation There is no fixed version for yasm. References - GitHub Gist - GitHub Issue Credit: Clingto...

AZL-10401 CVE-2022-36879 affecting package kernel for versions less than 5.15.67.1-4

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel version 5.18.14 and earlier versions have a security vulnerability that stems from xfrmexpandpolicies in net/xfrm/xfrmpolicy.c that causes refcount to be deleted twice. No detailed...

CVE-2021-33465

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacro in modules/preprocs/nasm/nasm-pp.c...

AZL-35375 CVE-2021-33465 affecting package yasm 1.3.0-17

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacro in modules/preprocs/nasm/nasm-pp.c...

AZL-10327 CVE-2021-33457 affecting package yasm 1.3.0-17

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacparams in modules/preprocs/nasm/nasm-pp.c...

DEBIAN-CVE-2021-33457

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacparams in modules/preprocs/nasm/nasm-pp.c...

AZL-10335 CVE-2021-33465 affecting package yasm 1.3.0-17

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacro in modules/preprocs/nasm/nasm-pp.c...

UBUNTU-CVE-2021-33465

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandmmacro in modules/preprocs/nasm/nasm-pp.c...

CVE-2021-33466

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expandsmacro in modules/preprocs/nasm/nasm-pp.c...

yasm 代码问题漏洞

yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from the presence of a NULL pointer dereference in the expandmmacro function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this...

Malicious code in usaa-expand-collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142c29db83894f2e0f732ea8c9ce49c85797b4fe9ba3be863ad149bf299883cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6840 Malicious code in usaa-expand-collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142c29db83894f2e0f732ea8c9ce49c85797b4fe9ba3be863ad149bf299883cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kim-expand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc3612c35aa92d6a2409e7a26c7e90f84ca3cdaf94659241275a95c4fa2af7cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the tiff_expand_colormap() function in the MuPDf PDF viewer software, which allows a hacker to cause a service failure.

The vulnerability of the tiffexpandcolormap function in the MuPDf PDF viewer software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause a service failure...

Malware families using Pay-Per-Install service to expand targets

By Owais Sultan The PrivateLoader is a Pay-Per-Install malware PPI that delivers a wide variety of malware. Including Vidar, Raccoon, Redline,… This is a post from HackRead.com Read the original post: Malware families using Pay-Per-Install service to expand targets...