Lucene search
+L

145 matches found

Positive Technologies
Positive Technologies
added 2026/03/18 12:00 a.m.18 views

PT-2026-26196

Name of the Vulnerable Software and Affected Versions PySpector versions 0.1.6 and prior Description PySpector, a static analysis security testing framework for Python development, is affected by a security validation bypass in its plugin system. The validate plugin code function in plugin...

8.3CVSS6.4AI score0.00169EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
added 2026/02/16 12:27 a.m.13 views

SUSE CVE-2025-71223

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References3
NVD
NVD
added 2026/02/14 5:15 p.m.20 views

CVE-2025-71223

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

5.5CVSS0.00127EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/14 5:15 p.m.10 views

UBUNTU-CVE-2025-71223

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

5.5CVSS5.7AI score0.00127EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/02/14 5:15 p.m.13 views

CVE-2025-71223

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

5.5CVSS5.7AI score0.00127EPSS
SaveExploits0References6
OSV
OSV
added 2026/02/14 4:27 p.m.8 views

CVE-2025-71223 smb/server: fix refcount leak in smb2_open()

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

5.2AI score
SaveExploits0References7
CVE
CVE
added 2026/02/14 4:27 p.m.49 views

CVE-2025-71223

CVE-2025-71223 affects the Linux kernel's ksmbd SMB server path (smb2_open and ksmbd_vfs_getattr). The issue is a refcount leak when ksmbd_vfs_getattr() fails, potentially causing resource leakage and local impact. A kernel update fixing the refcount leak is provided by the referenced advisories ...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/02/14 4:27 p.m.42 views

CVE-2025-71223 smb/server: fix refcount leak in smb2_open()

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

0.00127EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/14 4:27 p.m.9 views

CVE-2025-71223

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in smb2open When ksmbdvfsgetattr fails, the reference count of ksmbdfile must be released...

5.2AI score0.00127EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
added 2026/02/02 8:45 p.m.4 views

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the getattr function. An attacker can execute arbitrary code by crafting a malicious pickle file that...

8.4CVSS6.1AI score
SaveExploits0References2
OSV
OSV
added 2026/02/02 8:45 p.m.18 views

GHSA-9M3X-QQW2-H32H picklescan missing detection by simple obfuscation of a `builtins.eval` call

Summary An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the host loading a pickle payload from an untrusted source. Details It's possible to hide the eval call nested under another callable via getattr. PoC python import builtins class EvilClas...

9.3CVSS6.3AI score0.00519EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/02/02 8:45 p.m.16 views

picklescan missing detection by simple obfuscation of a `builtins.eval` call

Summary An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the host loading a pickle payload from an untrusted source. Details It's possible to hide the eval call nested under another callable via getattr. PoC python import builtins class EvilClas...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.31 views

PT-2026-50468

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 1.0.1 Description An unsafe deserialization issue allows unauthenticated users to execute arbitrary code on a host that loads a pickle payload from an untrusted source. This is achieved by hiding eval calls nested...

9.8CVSS6.3AI score0.00519EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
added 2026/01/24 12:25 a.m.11 views

SUSE CVE-2025-71153

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the function returns immediately without freeing the allocated filename, leading to a memory leak. Fix this by freeing the filename before returning...

5.5CVSS5.2AI score0.00121EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/01/23 3:16 p.m.9 views

CVE-2025-71153

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the function returns immediately without freeing the allocated filename, leading to a memory leak. Fix this by freeing the filename before returning...

5.5CVSS5.7AI score0.00121EPSS
SaveExploits0References26
CVE
CVE
added 2026/01/23 2:25 p.m.40 views

CVE-2025-71153

Technical details for CVE-2025-71153 are not publicly available in the provided connected documents. Monitor for updates from security advisories and vendor PSNs to obtain affected products, impact, and remediation.

5.5CVSS5.2AI score0.00121EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/01/23 2:25 p.m.18 views

CVE-2025-71153 ksmbd: Fix memory leak in get_file_all_info()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the function returns immediately without freeing the allocated filename, leading to a memory leak. Fix this by freeing the filename before returning...

5.2AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:25 p.m.3 views

CVE-2025-71153

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the function returns immediately without freeing the allocated filename, leading to a memory leak. Fix this by freeing the filename before returning...

5.2AI score0.00121EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/15 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-40326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Define actions for the new timedeleg FATTR4 attributes NFSv4 clients won't send legitimate GETATTR requests for these new attributes because they are...

7.5CVSS5.6AI score0.0035EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/12/09 12:24 a.m.11 views

SUSE CVE-2025-40326

In the Linux kernel, the following vulnerability has been resolved: NFSD: Define actions for the new timedeleg FATTR4 attributes NFSv4 clients won't send legitimate GETATTR requests for these new attributes because they are intended to be used only with CBGETATTR and SETATTR. But NFSD has to do...

7.5CVSS6.2AI score0.0035EPSS
SaveExploits0References3
Rows per page
Query Builder