38586 matches found
SUSE CVE-2025-39702
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
CVE-2025-39702
CVE-2025-39702 is a Linux kernel issue where ipv6: sr: Fix MAC comparison to be constant-time addresses timing-attack risk. Connected documents confirm kernels across multiple distributions (e.g., kernel6.12 line for Amazon Linux ALAS, Debian LTS DLA, Astralinux, Mariner/CBL) are affected in vers...
Malicious code in azure-iot-stresstests (npm)
The package azure-iot-stresstests was found to contain malicious code...
OESA-2025-2156 iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...
OESA-2025-2157 iputils security update
The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic. Security Fixes: ping in iputils...
Where Have All the Firewalls Gone? Security Consequences of Residential IPv6 Transition
IPv4 NAT has limited the spread of IoT botnets considerably by default-denying bots' incoming connection requests to in-home devices unless the owner has explicitly allowed them. As the Internet transitions to majority IPv6, however, residential connections no longer require the use of NAT. This...
ipv6: reject malicious packets in ipv6_gso_segment()
...
WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified
...
net: Fix icmp host relookup triggering ip_rt_bug
...
A Framework for Detection and Classification of Attacks on Surveillance Cameras under IoT Networks
The increasing use of Internet of Things IoT devices has led to a rise in security related concerns regarding IoT Networks. The surveillance cameras in IoT networks are vulnerable to security threats such as brute force and zero-day attacks which can lead to unauthorized access by hackers and...
cifs: fix potential memory leaks in session setup
...
cifs: fix underflow in parse_server_interfaces()
...
CVE-2025-20335
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to a lack of proper authenticatio...
A Quantum Genetic Algorithm-Enhanced Self-Supervised Intrusion Detection System for Wireless Sensor Networks in the Internet of Things
The rapid expansion of the Internet of Things IoT and Wireless Sensor Networks WSNs has significantly increased the attack surface of such systems, making them vulnerable to a wide range of cyber threats. Traditional Intrusion Detection Systems IDS often fail to meet the stringent requirements of...
Linux Distros Unpatched Vulnerability : CVE-2018-17019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc. CVE-2018-17019 Note that Nessus relies on the presen...
Evaluating Diverse Feature Extraction Techniques of Multifaceted IoT Malware Analysis: a Survey
As IoT devices continue to proliferate, their reliability is increasingly constrained by security concerns. In response, researchers have developed diverse malware analysis techniques to detect and classify IoT malware. These techniques typically rely on extracting features at different levels fr...
Cisco多款产品 信息泄露漏洞
Cisco IP Phone and others are products of Cisco, Inc.Cisco IP Phone is a hardware device.Cisco Video Phone is an IP phone.Cisco Desk Phone is a desktop phone. An information disclosure vulnerability exists in a number of Cisco products. The vulnerability stems from the exposure of sensitive...
Linux Distros Unpatched Vulnerability : CVE-2025-2498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain...
CVE-2008-20001
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
An Intrusion Detection System in Internet of Things Using Grasshopper Optimization Algorithm and Machine Learning Algorithms
The Internet of Things IoT has emerged as a foundational paradigm supporting a range of applications, including healthcare, education, agriculture, smart homes, and, more recently, enterprise systems. However, significant advancements in IoT networks have been impeded by security vulnerabilities...