PT-2025-38517

Name of the Vulnerable Software and Affected Versions Keras affected versions not specified Description The Model.load model method can be exploited to achieve arbitrary code execution, even when safe mode is enabled. This is possible by creating a specially crafted .h5 or .hdf5 model archive tha...

Malicious code in @zalastax/nolb-_h5 (npm)

The package @zalastax/nolb-h5 was found to contain malicious code...

MAL-2025-4659 Malicious code in ua-aio-h5-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab58d896f2b725bec2019a299fcded18aa3b8608029b55314c6b34b5c3d4d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ua-aio-h5-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab58d896f2b725bec2019a299fcded18aa3b8608029b55314c6b34b5c3d4d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ua-aio-h5-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2023-43198

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hiblock.asp function...

CVE-2025-4902

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R68125. Affected by this issue is the function sub48F4F0 of the file /H5/versionupdate.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has...

CVE-2025-4903: Unverified Password Change

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R68125. This affects the function sub41F4F0 of the file /H5/webgl.asp?tgglport=0&remotemanagement=0&httppasswd=game&execservice=admin-restart. The manipulation leads to unverified password change. It is...

CVE-2025-4904: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. This vulnerability affects the function sub41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-4902: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R68125. Affected by this issue is the function sub48F4F0 of the file /H5/versionupdate.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has...

CVE-2025-4750: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R68125. This issue affects some unknown processing of the file /H5/getversion.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be...

Linux Bluetooth rtl_vnd{} Structure Data Compromise

The vulnerability in determining the structure of the rtlvnd module in the drivers/bluetooth/hcih5.c file – the driver for supporting Bluetooth devices in Linux operating systems – involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access ...

CVE-2025-2153

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

CVE-2025-2153: Heap-based Buffer Overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

SUSE CVE-2022-49202

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciuart: add missing NULL check in h5enqueue Syzbot hit general protection fault in pmruntimeresume. The problem was in missing NULL check. hu-serdev can be NULL and we should not blindly pass &serdev-dev somewhere,...

DEBIAN-CVE-2022-49202

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciuart: add missing NULL check in h5enqueue Syzbot hit general protection fault in pmruntimeresume. The problem was in missing NULL check. hu-serdev can be NULL and we should not blindly pass &serdev-dev somewhere,...

kernel: Bluetooth: btrtl: fix out of bounds memory access

A flaw was found in the Linux kernel's Realtek Bluetooth driver. When a device is configured using specific serial communication protocols, the driver fails to allocate necessary memory for internal operational data. This failure leads to an out-of-bounds memory write, which a local attacker coul...

Malicious code in storefront-h5-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bdecd59d5667e506fd4f66d29c575454020e37384211ce8a27e463cd6971298 The OpenSSF Package Analysis project identified 'storefront-h5-sdk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

DEBIAN-CVE-2024-26890

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtekdata'. If btrtl driver is used with btusb, then memory for private hci data is...

UBUNTU-CVE-2024-26890

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtekdata'. If btrtl driver is used with btusb, then memory for private hci data is...