CVE-2023-53495

The CVE-2023-53495 issue in the Linux kernel concerns the mvpp2 ethernet driver (mvpp2_main). A fix was implemented to prevent an OOB write in mvpp2_ethtool_get_rxnfc() by validating rule_cnt before iterating over rules allocated in ethtool_get_rxnfc(). The underlying problem was that the rules b...

CVE-2023-53495 net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated in ethtoolgetrxnfc and the size is determined by rulecnt from user space. So rulecnt needs to be check before using rules to avoid OOB...

NewStart CGSL MAIN 6.06 : cracklib Vulnerability (NS-SA-2025-0214)

The remote NewStart CGSL host, running version MAIN 6.06, has cracklib packages installed that are affected by a vulnerability: - Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain...

NewStart CGSL MAIN 6.06 : python-pip Vulnerability (NS-SA-2025-0209)

The remote NewStart CGSL host, running version MAIN 6.06, has python-pip packages installed that are affected by a vulnerability: - pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory. CVE-2013-1888 Note that Ness...

KitHack

This is a collection of tools and scripts for the KitHack framework, a penetration testing tool. The repository includes a Python script, clean.sh, which is used to clean up the tools directory. The script checks if the user has root permissions and, if so, removes any tools that are not empty. T...

The vulnerability of the `txgbe_probe()` function in the `drivers/net/ethernet/wangxun/txgbe/txgbe_main.c` file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the txgbeprobe function in the drivers/net/ethernet/wangxun/txgbe/txgbemain.c file of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mt7925_change_vif_links() function in the mediatek/mt76/mt7925/main.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt7925changeviflinks function in the mediatek/mt76/mt7925/main.c kernel of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-11017

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a...

CVE-2025-10767

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remoteupload/remotedownload of the file main.py of the component Configuration File Handler. The manipulation of the argument configuration"PASSWORD" results in os command injection. The...

CVE-2025-10767 CosmodiumCS OnlyRAT Configuration File main.py remote_download os command injection

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remoteupload/remotedownload of the file main.py of the component Configuration File Handler. The manipulation of the argument configuration"PASSWORD" results in os command injection. The...

CosmodiumCS OnlyRAT 安全漏洞

CosmodiumCS OnlyRAT is a remote access Trojan by the CosmodiumCS individual developer, primarily used to demonstrate and study how remote control malware works. A security vulnerability exists in CosmodiumCS OnlyRAT 3.2 and earlier versions, which stems from a misuse of the parameter...

CVE-2025-10689

A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgimain of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This...

CVE-2025-10689 D-Link DIR-645 soap.cgi soapcgi_main command injection

A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgimain of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This...

CVE-2025-10689

The CVE-2025-10689 entry concerns D-Link DIR-645 firmware (model 105B01). A vulnerability exists in the soapcgi_main function within /soap.cgi where manipulation of the service argument enables remote command injection. The issue can be exploited remotely and publicly available exploit code is no...

PT-2025-38346

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-stb-cbq 19 Description A flaw exists in the DRM framework where a double disable condition can occur if user space issues an extra screen update immediately after closing the DRM device while the downstrea...

CVE-2025-57452

The realme BackupRestore app (version 15.1.12_2810c08_250314 ) is vulnerable to a security flaw caused by improper URI scheme handling within the com.coloros.pc.PcToolMainActivity component. A local attacker can exploit this by sending crafted ADB intents , potentially leading to an application c...

The vulnerability of the soapcgi_main() function in D-Link DIR-845L router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the soapcgimain function in D-Link DIR-845L router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the pcVar3 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the main() function in TOTOLINK EX1200T microcontroller-based routers allows a hacker to execute arbitrary commands.

The vulnerability of the main function in TOTOLINK EX1200T microcontroller-based routers lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Arbitrary Command Injection

Overview mcp-kubernetes-server is a The mcp-kubernetes-server is a Model Context Protocol MCP server that enables AI assistants to interact with Kubernetes clusters. It serves as a bridge between AI tools like Claude, Cursor, and GitHub Copilot and Kubernetes, translating natural language request...

CVE-2025-10103

A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation of the argument mainevent can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the...