CVE-2025-38355 drm/xe: Process deferred GGTT node removals on device unwind

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on device unwind While we are indirectly draining our dedicated workqueue ggtt-wq that we use to complete asynchronous removal of some GGTT nodes, this happends as part of the managed-d...

NewStart CGSL MAIN 7.02 : e2fsprogs Vulnerability (NS-SA-2025-0172)

The remote NewStart CGSL host, running version MAIN 7.02, has e2fsprogs packages installed that are affected by a vulnerability: - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a speciall...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an invalid bitmap statistic collection could lead to a GPF...

PT-2025-35989

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A general protection fault can occur in the hfs find init function within the Linux kernel's HFS Hierarchical File System implementation. This fault is triggered when a tree pointer is...

NewStart CGSL MAIN 7.02 : giflib Multiple Vulnerabilities (NS-SA-2025-0126)

The remote NewStart CGSL host, running version MAIN 7.02, has giflib packages installed that are affected by multiple vulnerabilities: - Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the frame buffer not properly obtaining a GEM handle reference, which could lead to a segmentation error...

PT-2025-33784

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the ARM64 BPF JIT related to frame pointer FP initialization for exception boundaries. Specifically, when a BPF program acts as an exception boundar...

The vulnerability of the fromNetToolGet() function (/goform/setPingInfo) in the Tenda O3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromNetToolGet function /goform/setPingInfo in the Tenda O3 wireless access point software arises due to buffer overflows during the processing of the ip parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of Juniper Networks Junos OS’s Connectivity Fault Management (CFM) system allows a attacker to cause a service failure.

The vulnerability of Connectivity Fault Management CFM in Juniper Networks’ Junos OS operating systems is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2025-43676

Name of the Vulnerable Software and Affected Versions Wasmtime versions 38.0.0 through 38.0.2 Description Wasmtime is a runtime for WebAssembly. Versions from 38.0.0 through 38.0.2 contain a flaw in the implementation of component-model related host-to-wasm trampolines. Specifically, a carefully...

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

SUSE SLES15 Security Update : gnuplot (SUSE-SU-2025:01811-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01811-2 advisory. - CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. - CVE-2025-31177: improper bounds check lea...

MAD-Spear: a Conformity-Driven Prompt Injection Attack on Multi-Agent Debate Systems

Multi-agent debate MAD systems leverage collaborative interactions among large language models LLMs agents to improve reasoning capabilities. While recent studies have focused on increasing the accuracy and scalability of MAD systems, their security vulnerabilities have received limited attention...

SUSE-SU-2025:01835-2 Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.9a - CVE-2025-31162: Fixed a floating point exception in fig2dev in getslope function bsc1240380. - CVE-2025-31163: Fixed a segmentation fault in fig2dev in putpatternarc function bsc1240381. - CVE-2025-31164: Fixe...

Security update for gnuplot

This update for gnuplot fixes the following issues: CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8copyone bsc1240326. CVE-2025-31178: unvalidated user input leads to segmentation faul...

SUSE-SU-2025:01811-2 Security update for gnuplot

This update for gnuplot fixes the following issues: - CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. - CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8copyone bsc1240326. - CVE-2025-31178: unvalidated user input leads to segmentatio...

CVE-2024-42646

A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service DoS via crafted messages...

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

PT-2025-29575 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.5 Description: NanoMQ version 0.17.5 contains a segmentation fault in the /nanomq/pub handler.c component. Attackers can exploit this issue by sending a crafted PUBLISH message, leading to a Denial of Service DoS...

NanoMQ 安全漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open sourced by EMQ USA. A security vulnerability exists in NanoMQ version 0.17.5, which stems from a segmentation error in the component /nanomq/pubhandler.c that could lead to a denial of service attack...