PT-2025-51669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to the rtl8723bs driver. The rtw get ie parser does not properly validate the length of Information Element IE data within network frames...

TencentOS Server 3: http-parser (TSSA-2022:0055)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0055 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: ruby:3.1 (TSSA-2024:0106)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0106 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: ruby (TSSA-2024:0331)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0331 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: gdk-pixbuf2 (TSSA-2025:0523)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0523 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input 250 KiB can cause the parser to allocate hundreds of megabytes, leading to denial-of-service DoS through memory exhaustion...

AZL-70538 CVE-2025-11230 affecting package haproxy for versions less than 2.4.24-2

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

rack: Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

A flaw was found in Rack where Rack::Multipart::Parser stores non-file form fields entirely in memory without size limits. An attacker can send a multipart/form-data request with an extremely large text field, causing the server to allocate large amounts of memory which leads to a denial of servi...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the SubRip subtitle parser. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the subtitle parser TMPlayer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the Rack::Multipart::Parser class of the module interface between web servers and Rack web applications allows a attacker to cause a service failure.

The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

json5 crate is unmaintained

The json5 crate is no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - serdejson5 - jsonc-parser - json-five...

RUSTSEC-2025-0120 json5 crate is unmaintained

The json5 crate is no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - serdejson5 - jsonc-parser - json-five...

EUVD-2025-175314

js-yaml has prototype pollution in merge...

OESA-2025-2650 yaml-cpp security update

yaml-cpp is a YAML parser and emitter in C++ matching the YAML 1.2 spec. Security Fixes: The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string.CVE-2017-11692...

Malicious Package

Overview loger-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-180550

Malicious code in loger-parser npm...

Malicious code in loger-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bae5da3bd8d27a466a9c283448407d51b93d85d73a97a5db78f46b3635cd3a4 The package loger-parser was found to contain malicious code. Source: ghsa-malware c75c0239d03c0dc3d95b5965598d3d59e96ce5a1826fc60aaba3dd34da283a2b A...