MAL-2023-7935 Malicious code in gcc-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c56396bd4649c70dcaeabf852889289fd684f12396ca746c0d623b5ea00612a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Heap-based Buffer Overflow

Description heap-buffer-overflow p/bf/plugin.c:176 in decode Environment radare2 5.8.9 31000 @ linux-x86-64 commit: 95b648f0907e91e10d55fc48147a7dae99029c5b Build export CC=gcc CXX=g++ CFLAGS="-fsanitize=address -static-libasan" CXXFLAGS="-fsanitize=address -static-libasan"...

AZL-27632 CVE-2021-32256 affecting package gcc for versions less than 11.2.0-9

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalatio...

Rocky Linux 9 : go-toolset and golang (RLSA-2023:3923)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3923 advisory. - The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses...

Exploit for Improper Validation of Array Index in Linux Linux_Kernel

CVE-2023-2008 Proof of concept exploit for CVE-2023-2008, a b...

DEBIAN-CVE-2023-29404

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "cgo LDFLAGS" directive. The arguments for a...

Cbrutekrag - Penetration Tests On SSH Servers Using Brute Force Or Dictionary Attacks. Written In C

Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by local law rules...

RHEL 8 : gcc-toolset-12-binutils (RHSA-2023:2873)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2873 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

PT-2025-17220 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the es58x rx err msg function. This occurs when can-do set mode fails, causing the function to return witho...

Exploit for Improper Ownership Management in Debian Debian_Linux

CVE-2023-0386...

Exploit for Improper Input Validation in Linux Linux_Kernel

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and...

Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-145)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-145 advisory. libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new. CVE-2022-27943 Tenable has extracted the preceding description block directly from the...

Huawei EulerOS: Security Advisory for libtar (EulerOS-SA-2023-1575)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

My POC for CVE-2022-...

Low: gcc

Issue Overview: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new. CVE-2022-27943 Affected Packages: gcc Issue Correction: Run dnf update gcc --releasever 2023.0.20230322 or dnf update --advisory ALAS2023-2023-145 --releasever...

Medium: gcc

Issue Overview: A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi...

Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-030)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-030 advisory. A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceiv...

Debian: Security Advisory (DLA-1362-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1606)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...