decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).

...

Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VDA 2203 OS Windows 11 || Username password incorrect with domain passthrough and SSON not working

Username password incorrect with domain passthrough and SSON not working...

Nextcloud: Users can modify tags on files that do not belong to them

A vulnerability was discovered in which users could modify tags on files that did not belong to them. This issue has been addressed...

Debian dsa-5879 : libsaml-dev - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5879 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5879-1 [email protected] https://www.debian.org/security/ Moritz...

CVE-2024-56185

In ProtocolUnsolOnSSAdapter::GetServiceClass of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

DEBIAN-CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

Malicious code in newland-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a04bb2785a6c11b6ba7677d8347c662a121ca7d3a53217aed73a2529cb11902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zero-timeout-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a6e8ed6991cf808053c17befcdab9455effa8b8510ef06d38f819ef7958071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secureshield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c523ad578efae0d36959b764d0ea4df3c7c88342580a6b3903a2873af85619e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cashbabe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ec5f41de1f80131a508d6a95c2661863b8da10d21a70182570105bb794460e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

net: enetc: Do not configure preemptible TCs if SIs do not support

...

wifi: rtw89: check return value of ieee80211_probereq_get() for RNR

...

BELL-CVE-2025-21860

Bulletin has no description...

Malicious code in shein-uesragent-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdca3a489ad131847e2e1677f86805c89bd1587e8a76fb2fea69415952284909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spectrocoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290b36acd27bae687a488826038fdc7f97273030fd80026b3bd796793c70df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-2216

A vulnerability, which was classified as critical, has been found in zzskzy Warehouse Refinement Management System 1.3. Affected by this issue is the function UploadCrash of the file /crash/log/SaveCrash.ashx. The manipulation of the argument file leads to unrestricted upload. The attack may be...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel that stems from a device not being properly freed when destroying a network namespace, which could lead to...

Malicious code in dt-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f84c1cc320f830bd5436c3d7b8ccef2d0d6a0e8edcfd05e472854ed042a5b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

K000150341: Wireshark/tshark vulnerabilities CVE-2018-14344, CVE-2018-14343, CVE-2018-14340, CVE-2018-11362, and CVE-2018-11360

Security Advisory Description CVE-2018-14344 In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read. CVE-2018-14343 In Wireshark 2.6.0 to...