EUVD-2024-41742

Malicious code in bioql PyPI...

EUVD-2023-31829

Malicious code in bioql PyPI...

EUVD-2024-37232

Malicious code in bioql PyPI...

EUVD-2023-54650

Malicious code in bioql PyPI...

SUSE CVE-2025-9232

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

OpenSSL 3.4.0 < 3.4.3 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.4.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.3 advisory. - Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm...

Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the ’noproxy’ environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

SUSE CVE-2023-53189

In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference idev depends on whether rstimer is not pending. Then modify rstimer timeout. There is a time gap in 1, during which if the pending...

CVE-2023-53365 ip6mr: Fix skb_under_panic in ip6mr_cache_report()

In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skbunderpanic in ip6mrcachereport skbuff: skbunderpanic: text:ffffffff88771f69 len:56 put:-4 head:ffff88805f86a800 data:ffff887f5f86a850 tail:0x88 end:0x2c0 dev:pim6reg ------------ cut here ------------ kernel BUG at...

Linux Distros Unpatched Vulnerability : CVE-2023-53189

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference idev depends on whether rstimer is not pending. Then modify...

CVE-2023-53189

In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference idev depends on whether rstimer is not pending. Then modify rstimer timeout. There is a time gap in 1, during which if the pending...

DEBIAN-CVE-2023-53189

In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference idev depends on whether rstimer is not pending. Then modify rstimer timeout. There is a time gap in 1, during which if the pending...

CVE-2023-53189

In CVE-2023-53189, the Linux kernel IPv6 addrconf subsystem has a fix for a potential refcount underflow affecting idev in addrconf_mod_rs_timer. The root cause is a timing gap where rs_timer may activate without holding idev, risking a refcount mismanagement. The fix is to hold idev when mod_tim...

CVE-2025-9779

CVE-2025-9779 affects TOTOLINK A702R (version 4.0.0-B20211108.1423). The vulnerability is in the function sub_4162DC of /boafrm/formFilter, where manipulation of the ip6addr argument causes a buffer overflow. The issue can be exploited remotely, and public exploits exist. Several sources corrobor...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from the failure of the parameter ip6addr of the function...

K000152658: Golang vulnerability CVE-2024-45341

Security Advisory Description A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make...

OSV-2025-565 Heap-buffer-overflow in pcpp::IPv6Address::IPv6Address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=432892652 Crash type: Heap-buffer-overflow READ 16 Crash state: pcpp::IPv6Address::IPv6Address pcpp::SomeIpSdIPv6Option::getIpAddress readParsedPacket...

SUSE SLES15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2025:02049-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02049-1 advisory. python311 was updated from version 3.11.10 to 3.11.13: - Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling...

SUSE-SU-2025:02057-1 Security update for python311

This update for python311 fixes the following issues: python311 was updated from version 3.11.10 to 3.11.13: - Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273. CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517:...

TOTOLINK多款产品 安全漏洞

TOTOLINK A3002RU and others are products of China Gion Electronics TOTOLINK.TOTOLINK A3002RU is a wireless router product.TOTOLINK A702r is a router device.TOTOLINK A3002R is a wireless router. A security vulnerability exists in several TOTOLINK products, which stems from a buffer overflow due to...