13977 matches found
Malicious code in amagi-kanban (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d71615497a724cea51b581b078681fd29f136e4d9338af74fea3692dd35754a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-12577
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
CVE-2024-46975
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory...
CVE-2024-47896
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
CVE-2024-12577
This vulnerability affects Imagination Technologies PowerVR-GPU components. A flaw in the rgxfw_pcset_ungrab() function within the Driver Development Kit (DDK) allows an out-of-range pointer shift when processing the psFWMemContext parameter (specifically via psFWMemContext->uiPageCatBaseRegSe...
CVE-2024-47896
The GPU Driver Development Kit (DDK) is vulnerable to an out-of-bounds write in the rgxfw_hwr_log_info() function within rgxfw_hwr.c. The root cause is an incorrect bounds check when processing the psHWRInfoBuf parameter, specifically via psHWRInfoBuf->ui32WriteIndex. An attacker can exploit t...
Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
...
Imagination GPU Driver security vulnerabilities
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver, which originates from kernel software installed and running in a Guest VM that may be able to leverage memory shared with the GPU firmware to write data to another Guest's...
Imagination GPU Driver security vulnerabilities
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in the Guest VM that may exploit memory shared with the GPU firmware to write data outside of the Guest's...
Imagination GPU Driver security vulnerabilities
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in a Guest VM that may issue improper commands to the GPU firmware to trigger writing data outside of the Guest's...
Imagination GPU Driver security vulnerabilities
The Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in the Guest VM that may leverage memory shared with the GPU firmware to write data outside of the Guest's...
CVE-2025-27106
binance-trading-bot is an automated Binance trading bot with trailing buy/sell strategy. Authenticated users of binance-trading-bot can achieve Remote Code Execution on the host system due to a command injection vulnerability in the "/restore" endpoint. The restore endpoint of binance-trading-bot...
CVE-2025-1001
Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack MITM. An attacker could modify the server's response and deliver a...
CVE-2025-1001
Medixant RadiAnt DICOM Viewer is affected by a vulnerability where the update mechanism fails to verify the update server’s certificate, enabling a man-in-the-middle (MITM) scenario. An attacker could modify the server response and push a malicious update to the user. The reports describe the iss...
CVE-2025-1001 Medixant RadiAnt DICOM Viewer Improper Certificate Validation
Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack MITM. An attacker could modify the server's response and deliver a...
PT-2025-7336 · Unknown · Npu Firmware
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GP...
PT-2025-7435 · Kernel · Kernel
Name of the Vulnerable Software and Affected Versions: Kernel software affected versions not specified Description: The issue concerns kernel software installed and running inside a Guest VM, which may post improper commands to the GPU Firmware. This can trigger a write of data outside the Guest'...
Vyper security vulnerabilities
Vyper is a Pythonic smart contract language for EVM open sourced by vyperlang. A security vulnerability exists in Vyper that stems from multiple evaluations of an iterator expression, which could lead to abnormal program behavior...
Medixant RadiAnt DICOM Viewer
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a machine-in-the-middle attack MITM, resulting in malicious updates being delivered to the user. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
