CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

CVE-2025-49655

CVE-2025-49655 affects the Keras framework with deserialization of untrusted data in versions 3.11.0 up to, but not including, 3.11.3. A maliciously uploaded Keras file containing a TorchModuleWrapper class can execute arbitrary code on an end user’s system when loaded, even if safe mode is enabl...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread...

ClipBucket 路径遍历漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A path traversal vulnerability exists in ClipBucket version 5.5.2 - 146, which stems from insufficient validation of file load paths and could lead to a path traversal...

EUVD-2025-34833

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

UBUNTU-CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

Security Bulletin: IBM MQ is vulnerable to Slowloris attack which is a type of denial-of-service (DoS) (CVE-2025-36128)

Summary IBM MQ is vulnerable to Slowloris attack which is a type of denial-of-service DoS. Vulnerability Details CVEID:CVE-2025-36128 DESCRIPTION: IBM MQ is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type...

PT-2025-42545

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.9.9 Description The software contains a memory leak within the load relocations function. Recommendations Update to version 5.9.9 or later...

CVE-2025-60358

The radare2 tool (v.5.9.8 and before) contains a memory leak within the _load_relocations function. This flaw can lead to performance degradation and may be exploited by an attacker to cause the application to crash, resulting in a denial of service (DoS). While some distributions have acknowledg...

Radare2 安全漏洞

Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A security vulnerability exists in Radare2 version 5.9.8 and earlier, which stems from a memory leak in the loadrelocations function...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

EUVD-2025-34657

On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-39991 wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11kqmim3load If ab-fw.m3data points to data, then fw pointer remains null. Further, if m3mem is not allocated, then fw is dereferenced to be passed to ath11kerr function. Replace fw-size b...

CVE-2025-39991

CVE-2025-39991 affects the Linux kernel’s wifi/ath11k driver. The root cause is a potential NULL dereference in ath11k_qmi_m3_load() when ab->fw.m3_data points to data and m3_mem is not allocated, causing fw to be dereferenced in ath11k_err. The patch fixes this by replacing fw->size with m...

CVE-2025-39991 wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11kqmim3load If ab-fw.m3data points to data, then fw pointer remains null. Further, if m3mem is not allocated, then fw is dereferenced to be passed to ath11kerr function. Replace fw-size b...

[SECURITY] Fedora 42 Update: mirrorlist-server-3.0.8-1.fc42

The mirrorlist-server uses the data created by MirrorManager2 https://github.com/fedora-infra/mirrormanager2 to answer client request for the "best" mirror. This implementation of the mirrorlist-server is written in Rust. The original version of the mirrorlist-server was part of the MirrorManager...