1505 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-19219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. CVE-2018-19219 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-12963
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in Sass::Eval::operator in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to...
Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain
Authorities from the Netherlands and the United States have announced the dismantling of an illicit marketplace called VerifTools that peddled fraudulent identity documents to cybercriminals across the world. To that end, two marketplace domains verif.tools and veriftools.net and one blog have be...
Linux Distros Unpatched Vulnerability : CVE-2017-11684
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in the buildtable function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted...
Linux Distros Unpatched Vulnerability : CVE-2017-12958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in the function outputhex in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial ...
Linux Distros Unpatched Vulnerability : CVE-2018-19761
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access at fromsixel.c function: sixeldecoderawimpl in libsixel 1.8.2 that will cause a denial of service. CVE-2018-19761 Note that...
CVE-2025-5115
In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send RSTSTREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state, therefore forcing the server to consume...
CVE-2025-5115 MadeYouReset HTTP/2 vulnerability
In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send RSTSTREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state, therefore forcing the server to consume...
Linux Distros Unpatched Vulnerability : CVE-2024-42115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the jffs2 file system,the following abnormal printouts were found:...
Linux Distros Unpatched Vulnerability : CVE-2023-53090
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of...
RT-Thread Input Validation Error Vulnerability (CNVD-2025-16524)
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...
CLSA-2025-1751133361 open-vm-tools: Fix of CVE-2025-22247
CVE-2025-22247: prevent usage of illegal characters in user names and file paths...
WormGPT Makes a Comeback Using Jailbroken Grok and Mixtral Models
Cato CTRL uncovers new WormGPT variants on Telegram powered by jailbroken Grok and Mixtral. Learn how cybercriminals jailbreak top LLMs for uncensored, illegal activities in this latest threat research...
PT-2025-27249 · Crates.Io · Wasmtime-Jit-Debug
The unsound function dump code load record uses from raw parts to directly convert the pointer addr and len into a slice without any validation and that memory block would be dumped. Thus, the 'safe' function dump code load record is actually 'unsafe' since it requires the caller to guarantee tha...
TencentOS Server 3: gcc-toolset (TSSA-2023:0144)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0144 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
RT-Thread 输入验证错误漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...
SUSE-SU-2025:01743-1 Security update for dnsdist
This update for dnsdist fixes the following issues: Update to version 1.9.10. - CVE-2025-30194: illegal memory access double-free when processing specially crafted DoH exchanges leads to a denial-of-service bsc1242028. - CVE-2025-30193: stack exhaustion when processing too many queries on incomin...
kernel: tun: limit printing rate when illegal packet received by tun dev
In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev The Linux kernel CVE team has assigned CVE-2024-27013 to this issue. Upstream advisory:...
CVE-2023-28110
Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the...