12 matches found
PT-2026-54008
Name of the Vulnerable Software and Affected Versions Picklescan versions prior to 0.0.25 Description Picklescan fails to detect unsafe global functions within the Numpy library, which allows attackers to bypass static analysis. This issue enables the execution of arbitrary code during...
EUVD-2025-13375
Malicious code in bioql PyPI...
EUVD-2025-20212
Malicious code in bioql PyPI...
bpf: track changes_pkt_data property for global functions
...
SUSE CVE-2024-58098
In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...
CVE-2024-58098
In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...
UBUNTU-CVE-2024-58098
In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...
CVE-2024-58098 bpf: track changes_pkt_data property for global functions
In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...
CVE-2024-58098
In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...
CVE-2024-58098 bpf: track changes_pkt_data property for global functions
In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...
PT-2024-40477 · Silverstripe · Silverstripe/Framework
Name of the Vulnerable Software and Affected Versions: Silverstripe Framework affected versions not specified Description: The issue allows arbitrary global functions to be executed if malicious user input is passed through as the second argument of ViewableData::renderWith. This occurs when the...
discuz!某自带工具可拿shell
简要描述: discuz!某自带工具,由于使用不当,可以造成webshell。 而且经过调查,使用者数量较大。 详细说明: discuz! 安装包中会自带一个转换工具 convert 这个工具由于存在安全问题,可以拿shell 一般存在网站目录 convert 或 utility/convert 而且经过调查,使用数量还是很大的。 使用前题是data目录可写,这也是这个工具的使用前题。 分析: 文件: utility\convert\include\doconfig.inc.php 中 保存配置,跟踪到saveconfigfile...