Malicious code in @zalastax/nolb-li_ (npm)

The package @zalastax/nolb-li was found to contain malicious code...

MAL-2025-43259 Malicious code in @zalastax/nolb-li- (npm)

The package @zalastax/nolb-li- was found to contain malicious code...

MAL-2025-43267 Malicious code in @zalastax/nolb-li_ (npm)

The package @zalastax/nolb-li was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-li- (npm)

The package @zalastax/nolb-lion-li- was found to contain malicious code...

Malicious code in @zalastax/nolb-li- (npm)

The package @zalastax/nolb-li- was found to contain malicious code...

MAL-2025-43325 Malicious code in @zalastax/nolb-lion-li- (npm)

The package @zalastax/nolb-lion-li- was found to contain malicious code...

MAL-2025-12167 Malicious code in @zalastax/nolb-lion-li (npm)

The package @zalastax/nolb-lion-li was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-li (npm)

The package @zalastax/nolb-lion-li was found to contain malicious code...

PT-2025-31407

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: A type confusion vulnerability exists due to improper validation of user-supplied data when parsing LI files. This can allow a remote attacker to execute arbitrary code in the...

(0Day) Ashlar-Vellum Cobalt LI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

CVE-2025-2023

Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2025-2023

Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must vis...

Ashlar-Vellum Cobalt 输入验证错误漏洞

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. An input validation error vulnerability exists in Ashlar-Vellum Cobalt, which stems from an integer overflow when parsing an LI file and could lead to remote code execution...

Logpoint AgentX 安全漏洞

Logpoint AgentX is a component of a Security Information and Event Management SIEM solution from Logpoint Denmark. A security vulnerability exists in Logpoint AgentX versions prior to 1.5.0 that stems from inadequate access control and allows the li-admin user to access sensitive information...

PT-2025-4120 · Unknown +1 · Maxd Lightning Module +1

Name of the Vulnerable Software and Affected Versions: MaxD Lightning Module version 4.43 on OpenCart Description: A critical issue has been found in the MaxD Lightning Module on OpenCart, affecting some unknown processing. The manipulation of the argument li op/md leads to deserialization. The...

OpenCart Lightning 代码问题漏洞

OpenCart Lightning is an OpenCart extension from OpenCart, Inc. A code issue vulnerability exists in OpenCart Lightning version 4.43 that stems from a deserialization issue with the parameter liop/md...

CVE-2021-4442

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

CVE-2021-4442

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

CVE-2021-4442 tcp: add sanity tests to TCP_QUEUE_SEQ

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCPQUEUESEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ after restoring data in the receive queue. mprotect0x4aa000, 12288, PROTREAD = 0 mmap0x1ffff000, 4096, PROTNONE,...

CVE-2021-4442

CVE-2021-4442 – The Linux kernel TCP stack vulnerability described as: a syzkaller repro could cause RCV_SEQ to be advanced after data restoration in the receive queue, enabling an out-of-order or invalid sequence handling when TCP_QUEUE_SEQ is used on non-empty queues. The connected documents (A...