3665 matches found
Malicious code in ng2-accela-inputs (npm)
The package ng2-accela-inputs was found to contain malicious code...
Apache Superset 安全漏洞
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input by the chart visualization feature. An attacker could exploit the...
SpatialReference.org 安全漏洞
SpatialReference.org is an online resource platform organized by SpatialReference. A security vulnerability exists in versions of SpatialReference.org prior to 2025-05-17, which stems from mishandling of search query parameter inputs and could lead to a cross-site scripting attack...
BIT-LIBPYTHON-2025-6069 HTMLParser quadratic complexity when processing malformed inputs
The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service...
CVE-2025-8865
The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit this issue to crash the YCQL tablet server, resulting in a denial of service...
CVE-2025-8865
The CVE-2025-8865 issue affects YugabyteDB’s YCQL tablet server. A flaw in YCQL query handling can trigger a null pointer dereference when processing certain malformed inputs, allowing an authenticated attacker to crash the YCQL tablet server and cause a denial of service. Exploitation is describ...
BIT-PYTHON-MIN-2025-6069 HTMLParser quadratic complexity when processing malformed inputs
The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service...
BIT-PYTHON-2025-6069 HTMLParser quadratic complexity when processing malformed inputs
The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service...
Netgear DGN1000B Code Execution Vulnerability
The Netgear DGN1000B is a wireless router from the American company Netgear. A code execution vulnerability exists in the Netgear DGN1000B version 1.1.00.24 and 1.1.00.45, which stems from insufficient cleanup of setup.cgi endpoint inputs, and can be exploited by an attacker to potentially cause...
PT-2025-32549 · Yugabyte · Yugabytedb
Name of the Vulnerable Software and Affected Versions: YugabyteDB affected versions not specified Description: The YugabyteDB tablet server has a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could...
Linux Distros Unpatched Vulnerability : CVE-2024-26789
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/neonbs - fix out-of- bounds access on short input The bit-sliced implementatio...
SUSE-SU-2025:02717-1 Security update for python311
This update for python311 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249. - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. -...
Kodi Xbmc 安全漏洞
Kodi Xbmc is a free and open source software media player and digital media entertainment center from the Kodi Foundation in the United States. A security vulnerability exists in Kodi Xbmc version 2012-11-04 and earlier, which stems from the HTTP server not properly cleaning up URI inputs, which...
BlazeVideo HDTV Player Pro 安全漏洞
BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...
openSUSE Security Advisory (SUSE-SU-2025:02597-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-32166 · Nvidia · Nvidia Triton Inference Server
Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server for Windows and Linux affected versions not specified Description: NVIDIA Triton Inference Server is susceptible to an integer overflow triggered by specially crafted inputs. Successful exploitation of this issu...
LLM-Assisted Model-Based Fuzzing of Protocol Implementations
Testing network protocol implementations is critical for ensuring the reliability, security, and interoperability of distributed systems. Faults in protocol behavior can lead to vulnerabilities and system failures, especially in real-time and mission-critical applications. A common approach to...
CVE-2025-50572
Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their produ...
Denial of Service via Unbounded parameter values
Description The /api/memories endpoint in the LibreChat application is found to be accepting arbitrarily large values for the key and value parameters. These inputs are not being properly validated or restricted in terms of maximum allowed character length. When an input containing more than 100...
Security update for python310
This update for python310 fixes the following issues: CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...