3221 matches found
SUSE CVE-2020-26240
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch estimated early January, 2021. This happened on the ETC chain on...
Linux Distros Unpatched Vulnerability : CVE-2017-7187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sgioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service stack-based buffer overflow or...
kernel: padata: fix UAF in padata_reorder
A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...
kernel: padata: fix UAF in padata_reorder
A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...
Uncontrolled Recursion
Overview mupdf is a MuPDF.js Affected versions of this package are vulnerable to Uncontrolled Recursion when processing a crafted PDF file containing cyclic /Next references in the outline structure via the stripoutline function. An attacker can cause the application to enter an infinite recursio...
Uncontrolled Recursion
Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to Uncontrolled Recursion when processing a crafted PDF file containing cyclic /Next references in the...
Eviction Strategies Tool Released
Today, CISA released the Eviction Strategies Tool to provide cyber defenders with critical support and assistance during the containment and eviction phases of incident response. This tool includes: Cyber Eviction Strategies Playbook Next Generation Playbook-NG : A web-based application for...
Malicious code in next-preconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6c913ab58ceadfc5aa3fc495351d79f6b78e5af57e7256ed73de89043e91e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview next-preconfig is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
tsify-next is unmaintained, use tsify instead
The tsify-next crate is not maintained any more; use tsify instead...
RUSTSEC-2025-0048 tsify-next is unmaintained, use tsify instead
The tsify-next crate is not maintained any more; use tsify instead...
PT-2025-33039 · Crates.Io · Tsify-Next
The tsify-next crate is not maintained any more; use tsify instead...
Malicious code in next-minimal-server (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed5e4b150f949434786803be46122fa169432748424017c770c2582c50b6558 The OpenSSF Package Analysis project identified 'next-minimal-server'...
MAL-2025-6260 Malicious code in next-minimal-server (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed5e4b150f949434786803be46122fa169432748424017c770c2582c50b6558 The OpenSSF Package Analysis project identified 'next-minimal-server'...
Malicious code in realtime-next (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6123 Malicious code in realtime-next (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-52984
A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause impact to the availability of the device. When static route points to a reject next hop and a gNMI query is...
Malicious code in with-next-intl (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d19de7a1f0382187b4331c426d9c88dddd8734112cac8bfd611c4edadf922ad Any computer that has this package installed or running should be considered...
MAL-2025-5529 Malicious code in vite-plugin-next-refresh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-28938 · Ооо "Юзергейт" · Usergate Next-Generation Firewall
Уязвимость страницы блокировки межсетевого экрана UserGate Next-Generation Firewall NGFW связана с недостаточной проверкой входных данных. Эксплуатация уязвимости, может позволить нарушителю, выполнить произвольный код при переходе по специально сформированной ссылке...