147810 matches found
crypto: starfive - Correctly handle return of sg_nents_for_len
...
Congratulations to the top MSRC 2025 Q4 security researchers!
Congratulations to all the researchers recognized in this quarter’sMicrosoft Researcher Recognition Programleaderboard! Thank you to everyone for your hard work and continued partnership to secure customers...
URI Credential Leakage Bypass over CVE-2025-27221
...
HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks
HoneyMyte Mustang Panda is back with a new ToneShell backdoor. Read how this stealthy attack blinds Microsoft Defender to target government entities in Asia...
Exploit for Improper Access Control in Microsoft
CVE-2025-47962-POC Reproduction process： i686-w64-mingw32-gcc...
27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft. The activity, which involved uploading 27 npm packages from six differen...
NULL Pointer Dereference in PDO quoting
...
Heap buffer overflow in array_merge()
...
Information Leak of Memory in getimagesize
...
Exploit for Deserialization of Untrusted Data in Microsoft
No d...
Exploit for Deserialization of Untrusted Data in Microsoft
No d...
PyTorch torch.lstm_cell memory corruption
...
bpf: Fix invalid prog->stats access when update_effective_progs fails
...
landlock: Fix handling of disconnected directories
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2026-00010)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to perform spoofing attacks...
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
...
Net-SNMP snmptrapd crash
...
CVE-2025-67743
CVE-2025-67743 affects Local Deep Research. The vulnerability lies in the download service (download_service.py) where HTTP requests are made with raw requests.get() without SSRF protection, bypassing safeguards in safe_requests.py/ssrf_validator.py. This can allow an attacker to access internal ...
