Malicious code in @zalastax/nolb-gulp-o (npm)

The package @zalastax/nolb-gulp-o was found to contain malicious code...

MAL-2025-12782 Malicious code in @zalastax/nolb-o- (npm)

The package @zalastax/nolb-o- was found to contain malicious code...

Malicious code in @zalastax/nolb-passport-o (npm)

The package @zalastax/nolb-passport-o was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-o (npm)

The package @zalastax/nolb-lion-lib-o was found to contain malicious code...

MAL-2025-12781 Malicious code in @zalastax/nolb-o (npm)

The package @zalastax/nolb-o was found to contain malicious code...

MAL-2025-9947 Malicious code in @zalastax/nolb-_dsr-rollback-org-o (npm)

The package @zalastax/nolb-dsr-rollback-org-o was found to contain malicious code...

MAL-2025-12543 Malicious code in @zalastax/nolb-ngx-o (npm)

The package @zalastax/nolb-ngx-o was found to contain malicious code...

Malicious code in @zalastax/nolb-o (npm)

The package @zalastax/nolb-o was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-o (npm)

The package @zalastax/nolb-demo-o was found to contain malicious code...

Malicious code in channel-o (npm)

The package channel-o was found to contain malicious code...

Malicious code in @zalastax/nolb-google-o (npm)

The package @zalastax/nolb-google-o was found to contain malicious code...

Rockwell Automation ArmorBlock Series 安全漏洞

Rockwell Automation ArmorBlock Series is a series of secure I/O modules designed for harsh industrial environments from Rockwell Automation, Inc. A security vulnerability exists in the Rockwell Automation ArmorBlock Series that stems from a predictable web server session number increment interval...

Linux Distros Unpatched Vulnerability : CVE-2022-50098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts Ensure SRB is returned during I/O timeout error escalation. If that is not possible fail th...

pwn2exploit

pwn & exploit 这是些前段时间研究二进制的一些心得 Paper. 本来是希望能够从底层原理到全局把控的层次去整理. 这里只完成了部分的Paper, 还有很多的Paper只写了概要点. 个人有几篇 paper 还是很有参考价值的 linux进程动态so注入.md 这篇文章介绍了如何在目前的ELF下进行动态so注入, 介绍 gnu.hash 的结构和相关算法, 具体的代码可以参考evilELF, 代码设计规范. PWN之堆内存管理.md 这篇文章是我在阅读了很多参考资料和glibc后写的, 其中对于glibc分配算法中的各种缓存的设计有比较好的讲述以及对分配和释放算法有比价好的阐...

CVE-2025-38427 video: screen_info: Relocate framebuffers behind PCI bridges

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002322 fixes several issues. The following security issues were fixed: CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability bsc1235005. CVE-2024-53173:...

SUSE-SU-2025:02419-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238920. - CVE-2024-53214:...

ROS-20250721-01

The vulnerability of the iorwinitfile function of the iouring/rw.c module of the asynchronous I/O interface of the kernel of the of Linux operating system is related to reuse of previously freed memory. Exploitation exploitation of the vulnerability could allow an attacker to affect the...

CVE-2025-7577

CVE-2025-7577 affects Teledyne FLIR FB-Series O and FLIR FH-Series ID, version 1.3.2.16. The root cause is a hard-coded password that enables a remote attack. Documented impact indicates potential exposure of credentials and partial confidentiality impact, with attack vector over the network and ...