191 matches found
CVE-2025-61099
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaqueinfodetail function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LS Update packet...
FRRouting 安全漏洞
FRRouting is the FRRouting open source suite of network routing software that runs on Unix-like platforms. A security vulnerability exists in FRRouting version 10.4.1 and earlier, which stems from a null pointer dereference in the ospfopaquelsadump function in ospfopaque.c, which could lead to a...
FRRouting FRR 安全漏洞
FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 10.4.1 and earlier, which stems from a null pointer dereference in the opaqueinfodetail function in ospfopaque.c, which could lead to ...
CVE-2025-61100
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospfopaquelsadump function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS under specific malformed LSA conditions...
EUVD-2018-13287
Malware in sbrugna...
EUVD-2020-4703
Malware in sbrugna...
EUVD-2021-24943
Malware in sbrugna...
EUVD-2018-4332
Malware in sbrugna...
New Study Warns Several Free iOS and Android VPN Apps Leak Data
A Zimperium zLabs analysis of 800 free Android and iOS VPN apps exposes critical security flaws, including the Heartbleed bug, excessive system permissions, and non-transparent data practices. Learn how these 'privacy' tools are actually major security risks, especially for BYOD environments...
Chinese-Owned VPNs
One one my biggest worries about VPNs is the amount of trust users need to place in them, and how opaque most of them are about who owns them and what sorts of data they retain. A new study found that many commercials VPNS are often surreptitiously owned by Chinese companies. It would be hard for...
CVE-2024-3317
An improper access control was identified in the Identity Security Cloud ISC message server API that allowed an authenticated user to exfiltrate job processing metadata opaque messageIDs, work queue depth and counts for other tenants...
Invisible Tokens, Visible Bills: the Urgent Need to Audit Hidden Operations in Opaque LLM Services
Whitepaper called Invisible Tokens, Visible Bills: The Urgent Need To Audit Hidden Operations In Opaque LLM Services...
CVE-2021-38491
Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox 92...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2024-10635
Proofpoint Enterprise Protection’s Attachment Defense has an improper input validation vulnerability in S/MIME attachment handling that allows an unauthenticated remote attacker to bypass attachment scanning by sending a malicious S/MIME attachment with an opaque signature. When opened by a recip...
ses's global contour bindings leak into Compartment lexical scope
Impact Web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that have also elsewhere used const, let, and class bindings in the top-level scope of a tag will have inadvertently revealed these bindings in the lexical scope...
SUSE CVE-2024-49195
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair...
CVE-2024-49195
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair...
