CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

CVE-2025-63749 affects pnetlab version 5.3.11. The vulnerability is a Command Injection via the qemu_options parameter in pnetlab, due to improper handling of that parameter. Impact is described as possible command execution with low to moderate severity (CVSS 3.1 base score 6.5, network attack v...

PT-2025-47384

Name of the Vulnerable Software and Affected Versions pnetlab version 5.3.11 Description The software contains a flaw due to which an attacker could inject commands. This occurs through manipulation of the qemu options parameter. Recommendations At the moment, there is no information about a newe...

PT-2025-47407

Name of the Vulnerable Software and Affected Versions mongoc affected versions not specified Description A mongoc bulk operation t may encounter an issue where it reads invalid memory when handling large options. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

PNETLab 安全漏洞

PNETLab is a platform from PNETLab Inc. that allows labs to be downloaded and shared with the community. A security vulnerability exists in PNETLab version 5.3.11 that stems from the qemuoptions parameter being vulnerable to command injection attacks...

mongo-c-driver 安全漏洞

mongo-c-driver is an official MongoDB driver in C for the MongoDB open source. A security vulnerability exists in mongo-c-driver, which stems from the possibility of reading invalid memory when passing large options...

WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Make Email Customizer for WooCommerce versions = 1.0.6...

ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

...

SUSE-SU-2025:4096-1 Security update for binutils

This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: New versioned release of libsframe.so.2 s390: tools now support SFrame format 2; recognize 'z17' as CPU name bsc1247105, jscIBM-1485 sframe sections are n...

SUSE CVE-2025-40198

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

CVE-2025-64726 External Control of System or Configuration Setting and Uncontrolled Search Path Element in sfw

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...

CVE-2025-64726

Socket Firewall (sfw) is affected for binary versions prior to 0.15.5. The vulnerability allows arbitrary code execution when run in an untrusted project directory by placing a malicious .sfw.config; loading the file populates environment variables into the Node.js process, enabling an attacker t...

EUVD-2025-150376

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...