GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: skopeo-fips, nodetaint, falcoctl, mongodb-kubernetes-operator-fips, kubernetes-csi-external-attacher-fips, prometheus-node-exporter, pvc-autoresizer, protoc-gen-go-grpc, glow, vgpu-util, maru, falco-exporter-fips, stern, secrets-store-csi-driver, timescaledb-tune,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: skopeo-fips, falcoctl, mongodb-kubernetes-operator-fips, kubernetes-csi-external-attacher-fips, prometheus-node-exporter, pvc-autoresizer, protoc-gen-go-grpc, glow, vgpu-util, maru, falco-exporter-fips, stern, secrets-store-csi-driver, timescaledb-tune, localstack,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: skopeo-fips, nodetaint, falcoctl, mongodb-kubernetes-operator-fips, kubernetes-csi-external-attacher-fips, prometheus-node-exporter, pvc-autoresizer, glow, vgpu-util, maru, falco-exporter-fips, stern, secrets-store-csi-driver, timescaledb-tune, localstack, go-license...

CVE-2025-50739

iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization...

CVE-2025-58185 Parsing DER payload can cause memory exhaustion in encoding/asn1

Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...

GO-2025-4011 Parsing DER payload can cause memory exhaustion in encoding/asn1

Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...

CVE-2025-11447 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads...

GHSA-G46H-2RQ9-GW5M OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests

Summary JSON objects after decoding might use more memory than their serialized version. It is possible to tune a JSON to maximize the factor between serialized memory usage and deserialized memory usage similar to a zip bomb. While reproducing the issue, we could reach a factor of about 35. This...

D-Link Nuclias Connect 安全漏洞

D-Link Nuclias Connect is a network management software from D-Link for centralized management of wireless access points APs, supporting multi-device remote control and reporting capabilities. D-Link Nuclias Connect suffers from an observable response difference vulnerability that stems from the...

Dell BSAFE Crypto-C GetIndefiniteElementLen stack overflow vulnerability

Talos Vulnerability Report TALOS-2025-2142 Dell BSAFE Crypto-C GetIndefiniteElementLen stack overflow vulnerability October 16, 2025 CVE Number None SUMMARY A stack overflow vulnerability exists in the GetIndefiniteElementLen functionality of Dell BSAFE Crypto-C xxx. A specially crafted ASN.1...

CVE-2025-54858

When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the security policy is applied to a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End o...

SUSE SLES15 Security Update : haproxy (SUSE-SU-2025:03589-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03589-1 advisory. - CVE-2025-11230: Fixed issue in the mjson JSON decoder, that could have let to excessive resource consumption when processing numbers with large...

RLSA-2025:17119 Moderate: perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...

EUVD-2007-5752

Malware in sbrugna...

EUVD-2007-2376

Malware in sbrugna...

EUVD-2007-2374

Malware in sbrugna...

EUVD-2008-1325

Malware in sbrugna...

EUVD-2010-1254

Malware in sbrugna...

EUVD-2023-1882

Malicious code in bioql PyPI...

EUVD-2025-25708

Malicious code in bioql PyPI...