85 matches found
GNU C Library 安全漏洞
The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.2 and later contain security vulnerabilities. These vulnerabilities arise when functions such as nsprintrrf, nsprintrr, and fpnquery handle...
CVE-2026-30932
Froxlor is vulnerable to BIND zone file injection via unsanitized content in DomainZones.add for LOC, RP, SSHFP, and TLSA records. The API does not validate content, allowing injection of BIND directives like $INCLUDE which get written into the zone file and processed by BIND, exposing server fil...
CVE-2025-68820
In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4rawinode If ext4getinodeloc fails e.g. if it returns -EFSCORRUPTED, iloc.bh will remain set to NULL. Since ext4xattrinodedecrefall lacks error checking, this will lead to a null pointer...
PT-2026-2552
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ext4 implementation related to extended attribute handling. Specifically, a null pointer dereference can occur within the ext4 raw inode function if...
CVE-2016-10803
cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...
3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.9)
libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...
CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC
A vulnerability in the CodeMeter runtime affects the SICK products SICK CODE-LOC and SICK LIDAR-LOC. This could potentially affect the integrity, confidentiality and availability of the products. Only systems running on Microsoft Windows are affected. Furthermore, the systems are only affected wh...
EUVD-2016-1797
Malware in sbrugna...
EUVD-2005-3025
Malware in sbrugna...
EUVD-2025-30706
Malicious code in bioql PyPI...
CVE-2025-57946
Cross-Site Request Forgery CSRF vulnerability in Loc Bui payOS payos allows Cross Site Request Forgery.This issue affects payOS: from n/a through = 1.0.73...
CVE-2025-57946
Cross-Site Request Forgery CSRF vulnerability in Loc Bui payOS payos allows Cross Site Request Forgery.This issue affects payOS: from n/a through = 1.0.73...
PT-2025-38796
Name of the Vulnerable Software and Affected Versions payOS versions through 1.0.61 Description A Cross-Site Request Forgery CSRF issue exists in Loc Bui payOS. This allows an attacker to perform actions on behalf of a user without their knowledge. The issue affects payOS versions through 1.0.61...
CVE-2004-2288
Cross-site scripting XSS vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter...
DEBIAN-CVE-2025-37788
In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix memory leak in cxgb4initethtoolfilters error path In the for loop used to allocate the locarray and bmap for each port, a memory leak is possible when the allocation for locarray succeeds, but the allocation for bmap...
PT-2025-18468
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the cxgb4 init ethtool filters function. The leak occurs when the allocation for loc array succeeds, but the...
loc-ghiacci.com Improper Access Control vulnerability OBB-3803934
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
loc-matic.com Cross Site Scripting vulnerability OBB-3758879
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
loc-blog.de Cross Site Scripting vulnerability OBB-3265226
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
