190 matches found
EUVD-2021-2158
Malware in sbrugna...
EUVD-2021-21688
Malware in sbrugna...
EUVD-2008-1595
Malware in sbrugna...
EUVD-2009-0935
Malware in sbrugna...
EUVD-2024-1021
Malicious code in bioql PyPI...
EUVD-2025-10257
Malicious code in bioql PyPI...
EUVD-2022-0568
Malicious code in bioql PyPI...
EUVD-2022-5370
Malicious code in bioql PyPI...
EUVD-2022-0562
Malicious code in bioql PyPI...
PT-2025-40224
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0.neta Description The Linux kernel contains a flaw in the tipc Trusted Inter-Process Communication subsystem related to Maximum Transmission Unit MTU negotiation. A malicious peer could potentially send an...
CVE-2025-59942
go-f3 is a Golang implementation of Fast Finality for Filecoin F3. In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer overflow in the signer index validation,...
CVE-2025-59942 go-f3 module vulnerable to integer overflow leading to panic
go-f3 is a Golang implementation of Fast Finality for Filecoin F3. In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer overflow in the signer index validation,...
Go implementation of Fast Finality in Filecoin 输入验证错误漏洞
Go implementation of Fast Finality in Filecoin is an open source Golang library for Filecoin with a fast validation mechanism. An input validation error vulnerability exists in Go implementation of Fast Finality in Filecoin 0.8.6 and prior versions, which stems from an integer overflow when...
Linux Distros Unpatched Vulnerability : CVE-2016-10542
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ws is a simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455. By sending an overly lo...
Linux Distros Unpatched Vulnerability : CVE-2024-23450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash...
CVE-2022-21685
Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash for debug builds. For release builds and...
CVE-2021-45700
An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service Nervos CKB blockchain node crash via a dead call that is used as a DepGroup...
CVE-2021-43667
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any...
CVE-2019-5289
Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet length. Attackers can construct invalid packets to attack the active and standby communication channels. Successful exploit of this vulnerabili...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception due to an error event thrown by busboy. An attacker can cause a full nodejs application to crash by sending a specially crafted multi-part upload request. PoC javascript const express = require'express' const multer =...