Allocation of Resources Without Limits or Throttling

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...

SUSE CVE-2025-39782

In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2logdocheckpoint Both jbd2logdocheckpoint and jbd2journalshrinkcheckpointlist periodically release jlistlock after processing a batch of buffers to avoid long hold times on the jlistlock. However,...

TP-LINK AX10 Information Disclosure Vulnerability

The TP-LINK AX10 is a router. The TP-LINK AX10 suffers from an information disclosure vulnerability that is caused by a flaw in the explicit transmission of sensitive information. An attacker can exploit the vulnerability to obtain sensitive information...

Intelbras IWR 3000N 安全漏洞

Intelbras IWR 3000N is a wireless router from Intelbras, Brazil. A security vulnerability exists in Intelbras IWR 3000N version 1.9.8, which originates from the explicit storage of Wi-Fi passwords and could lead to password disclosure...

TP-LINK AX10 安全漏洞

The TP-LINK AX10 is a router. The TP-LINK AX10 suffers from an information disclosure vulnerability that is caused by a flaw in the explicit transmission of sensitive information. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2025-39674

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

DEBIAN-CVE-2025-39674

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

UBUNTU-CVE-2025-39674

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

CVE-2025-39674 scsi: ufs: ufs-qcom: Fix ESI null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Linux Distros Unpatched Vulnerability : CVE-2020-27824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenJPEG's encoder in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can supply crafted input to decomposition...

Linux Distros Unpatched Vulnerability : CVE-2025-22073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spufs: fix a leak on spufsnewfile failure It's called from spufsfilldir, and caller of that will do spufsrmdir in case of failure. That does remove everything...

Linux Distros Unpatched Vulnerability : CVE-2025-38133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4851: fix ad4858 chan pointer handling The pointer returned from...

Linux Distros Unpatched Vulnerability : CVE-2021-0938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosur...

BMC Control-M 安全漏洞

BMC Control-M is an application from BMC Inc. simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M version 9.0.21.300, which originates from the explicit storage of database credentials and could lead to information...

US Supreme Court Upholds Texas Porn ID Law

In a 6-3 decision, the Supreme Court held that age verification for explicit sites is constitutional. In a dissent, Justice Elena Kagan warned it burdens adults and ignores First Amendment precedent...

Flock Safety LPR 安全漏洞

Flock Safety LPR is a license plate recognition product from Flock Safety USA. A security vulnerability exists in Flock Safety LPR version 2.2 and prior versions, which stems from the explicit storage of code...

EditLord: Learning Code Transformation Rules for Code Editing

Code editing is a foundational task in software development, where its effectiveness depends on whether it introduces desired code property changes without changing the original code's intended functionality. Existing approaches often formulate code editing as an implicit end-to-end task, omittin...

SUSE CVE-2022-50110

In the Linux kernel, the following vulnerability has been resolved: watchdog: sp5100tco: Fix a memory leak of EFCH MMIO resource Unlike releasememregion, a call to releaseresource does not free the resource, so it has to be freed explicitly to avoid a memory leak...