578 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989996)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989996 advisory. In the Linux kernel, the following vulnerability has been resolved: LSM: general protection fault in legacyparseparam The usual LSM hook bail on fail scheme doesn't...
rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters
An unsafe default behavior in Rack::QueryParser allows bypass of the paramslimit parameter count restriction when query string parameters are delimited by semicolons ; rather than ampersands &. The parser counts only & when enforcing the limit, while still splitting on both & and ;. As a result, ...
OSV-2025-871 UNKNOWN READ in ojph::local::param_cod::~param_cod
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456837230 Crash type: UNKNOWN READ Crash state: ojph::local::paramcod::paramcod ojph::local::paramcod::paramcod ojph::local::paramcod::paramcod...
EUVD-2025-36141
A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...
CVE-2025-9371 Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagetitle’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with...
Linux Distros Unpatched Vulnerability : CVE-2022-50455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs: fix possible null-ptr-deref when parsing param According to commit vfs: parse: deal with zero length string value, kernel will set the param-string to null...
EUVD-2018-17665
Malware in sbrugna...
EUVD-2016-1015
Malware in sbrugna...
EUVD-2020-10370
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414509)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414509 advisory. A heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesystem Context functionality of the Linux kernel verified the supplie...
Belkin F9K1015 安全漏洞
Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from incorrect manipulation of the parameter pppUserName in the file /goform/formWanTcpipSetup, which could result in a buffer overflow...
EUVD-2022-55357
Malicious code in bioql PyPI...
EUVD-2025-31896
Malicious code in bioql PyPI...
EUVD-2022-53185
Malicious code in bioql PyPI...
EUVD-2024-30049
Malicious code in bioql PyPI...
EUVD-2022-55290
Malicious code in bioql PyPI...
EUVD-2025-32202
Malicious code in bioql PyPI...
EUVD-2022-7620
Malicious code in bioql PyPI...