22269 matches found
Tenda AC20 安全漏洞
The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from the failure of the savevirtualserdata function parameter list in the /goform/formSetVirtualSer file to correctly validate the length of the input...
0day-buffer-overflow-in-exiv2
PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
OSEC-2025-01 Albatross console out of memory
Background Albatross-console reads the console output from multiple unikernel tenders solo5-hvt. This console output can be retrieved using albatross-client. The console protocol is fairly simple: the unikernel invokes a PUTS hypercall, which sends arbitrary bytes of given length to the unikernel...
Tenda AC20 安全漏洞
The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from the failure of the sub46A2AC function parameter deviceList in the /goform/setMacFilterCfg file to properly validate the length of the input data,...
Linux Distros Unpatched Vulnerability : CVE-2024-42097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: emux: improve patch ioctl data validation In loaddata, make the validation of and skipping over the main info block match that in loadguspatch. In...
Linux Distros Unpatched Vulnerability : CVE-2025-38222
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: inline: fix len overflow in ext4prepareinlinedata When running the following code on an ext4 filesystem with inlinedata feature enabled, it will lead to...
Linux Distros Unpatched Vulnerability : CVE-2024-26805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: Fix kernel-infoleak-after-free in skbdatagramiter syzbot reported the following uninit-value access issue 1: netlinktofullskb creates a new skb and put...
Linux Distros Unpatched Vulnerability : CVE-2022-38475
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to ...
Linux Distros Unpatched Vulnerability : CVE-2023-46838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of ze...
GNU libcdio csp_eth_init function buffer overflow vulnerability
GNU libcdio is an American GNU community library for CD-ROM and CD image access. A buffer overflow vulnerability exists in GNU libcdio version 2.0, which stems from the failure of the ifname parameter in the cspethinit function to properly validate the length and size of the input data, and can b...
Linux Distros Unpatched Vulnerability : CVE-2025-38637
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netsched: skbprio: Remove overly strict queue assertions In the current implementation,...
Oracle Linux 10 : kernel (ELSA-2025-13598)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13598 advisory. - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159 - Revert 'smb: client: fix TCP timers deadlock after rmmod'...
Malicious code in review-length-stats (npm)
The package review-length-stats was found to contain malicious code...
Malicious code in browserify-length (npm)
The package browserify-length was found to contain malicious code...
MAL-2025-22989 Malicious code in ifm-length (npm)
The package ifm-length was found to contain malicious code...
MAL-2025-32181 Malicious code in review-length-stats (npm)
The package review-length-stats was found to contain malicious code...
Malicious code in ifm-length (npm)
The package ifm-length was found to contain malicious code...
