60 matches found
PT-2026-8036
Name of the Vulnerable Software and Affected Versions TON Virtual Machine versions prior to 2024.10 Description A Stack Overflow issue exists in the TON Virtual Machine TVM. The root cause is the improper handling of vmstate and continuation jump instructions, leading to continuous dynamic tail...
EUVD-2015-1705
Malware in sbrugna...
Malicious code in test-mlw2-jumps-muntu (npm)
The package test-mlw2-jumps-muntu was found to contain malicious code...
MAL-2025-35595 Malicious code in test-mlw2-jumps-muntu (npm)
The package test-mlw2-jumps-muntu was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2018-25020
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substanti...
Agency Problems and Adversarial Bilevel Optimization under Uncertainty and Cyber Threats
We study an agency problem between a holding company and its subsidiary, exposed to cyber threats that affect the overall value of the subsidiary. The holding company seeks to design an optimal incentive scheme to mitigate these losses. In response, the subsidiary selects an optimal cybersecurity...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ext4setattr function incorrectly jumping labels, which could result in mapping locks not being released...
Dell NetWorker Open Redirect Vulnerability
Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. Dell NetWorker suffers from an open redirection vulnerability that stems from the system not handling target jumps appropriately, no details of the vulnerability are available at this time...
Adobe Connect 输入验证错误漏洞
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Connect, which stems from the system's failure to appropriately handle target jumps, and can be exploited by an attacker to redirect a use...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A spoofing vulnerability exists in Mozilla Firefox for Android, which stems from the system's failure to appropriately handle destination jumps, and can be exploited by an attacker to spoof the content...
CVE-2024-44083
ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jump corresponds to the payload from where the actual entry point will be invoked. NOTE: in many use cases, this is an inconvenience but not a security issue...
CVE-2024-44083
CVE-2024-44083 affects Hex-Rays IDA Pro (IDA64.dll)
CVE-2024-44083
ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jump corresponds to the payload from where the actual entry point will be invoked. NOTE: in many use cases, this is an inconvenience but not a security issue...
Hex Rays IDA Pro 安全漏洞
Hex Rays IDA Pro is a powerful disassembler and a versatile debugger from Hex Rays Belgium. It is commonly used for reverse engineering. A security vulnerability exists in Hex Rays IDA Pro 8.4 and earlier versions, which stems from a possible crash of ida64.dll when processing a code section with...
CVE-2024-44083
ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jump corresponds to the payload from where the actual entry point will be invoked. NOTE: in many use cases, this is an inconvenience but not a security issue...
PT-2024-30940
Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 8.4 and earlier Description The issue occurs when there is a section with many jumps linked, and the final jump corresponds to the payload from where the actual entry point will be invoked, causing ida64.dll in Hex-Ra...
UBUNTU-CVE-2021-47428
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping into a 3: label inside the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over it. By a small...
SAP S/4HANA Open Redirect Vulnerability
SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. An open redirection vulnerability exists in SAP S/4HANA, which can be exploited by an attacker to redirect a user to a malicious site, due to a failure to appropriately...
SAP S/4HANA 输入验证错误漏洞
SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. An open redirection vulnerability exists in SAP S/4HANA, which can be exploited by an attacker to redirect a user to a malicious site, due to a failure to appropriately...
Apache Tomcat 输入验证错误漏洞
Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server. The program implements the Servlet and JavaServer Page JSP support. An open redirection vulnerability exists in Apache Tomcat, which stems from the FORM authentication feature not handling target...