8312 matches found
CVE-2025-5644 Radare2 radiff2 cons.c r_cons_flush use after free
A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function rconsflush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach thi...
CVE-2025-5643
Radare2 5.9.9 is affected by CVE-2025-5643 through the cons_stack_load function in libr/cons/cons.c. The vulnerability arises from manipulating the -T argument, causing memory corruption. Exploitation is local with high attack complexity; exploits have been disclosed but the real existence is dou...
Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2025-156-01)
The version of seamonkey installed on the remote host is prior to 2.53.21. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-156-01 advisory. New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
The vulnerability of the NTFS file system of the Windows operating system, which allows a hacker to execute arbitrary code
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Spanning-Tree-Packing Protocol for Conference Key Propagation in Quantum Networks
We consider a network of users connected by pairwise quantum key distribution QKD links. Using these pairwise secret keys and public classical communication, the users want to generate a common conference secret key at the maximal rate. We propose an algorithm based on spanning tree packing a kno...
MAL-2025-4664 Malicious code in new-presentation-api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...
Malicious code in new-presentation-api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...
Ghostscript: NPDL device: Compression buffer overflow
A flaw was found in Artifex Ghostscript. The NPDL device has a compression buffer overflow for contrib/japanese/gdevnpdl.c...
Ubuntu 24.04 LTS / 25.04 : MariaDB vulnerabilities (USN-7548-1)
The remote Ubuntu 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7548-1 advisory. Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to...
HTTPS access to NetScaler Console is failed after installing a new certificate
HTTPs access to NetScaler Console failed after installing a new certificate from GUI System -Administration -Install SSL Certificate in NetScaler Console...
USN-7548-1 mariadb vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...
USN-7548-1: MariaDB vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...
Packet Storm New Exploits for May, 2025
This archive contains all of the 129 exploits added to Packet Storm in May, 2025...
kernel security update
5.14.0-570.19.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...
Medium: golang
Issue Overview: A directory traversal vulnerability was discovered in the Go programming language's os package in versions prior to 1.24.3. The vulnerability allows improper access to the parent directory of an os.Root by opening a filename ending in "../". When exploited, this vulnerability...
CLSA-2025-1748629601 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007, cpuid:0x00A20F10ver:0x0A20102D, cpuid:0x00A70F41ver:0x0A704107,...
Security update for bind
This update for bind fixes the following issues: Update to version 9.20.9. Security issues fixed: CVE-2025-40775: denial-of-service due to assertion failure caused by the processing of a NS message with an invalid TSIG bsc1243361. CVE-2024-12705: CPU and memory exhaustion due to DNS-over-HTTPS...
A new author has appeared
Welcome to this week's edition of the Threat Source newsletter. In the words of Game Changer host Sam Reich, "And your host, me! I've been here the whole time!" Okay, maybe it's not the whole time, but for the past three months, I've been settling into my role here at Cisco Talos. Editing blogs,...
The vulnerability of the software’s new user creation function in video conferencing applications like VideoGrace allows attackers to execute XSS attacks.
The vulnerability of the software’s new user creation function for video conferencing applications, VideoGrace, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
