wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. Features · Screenshots · Install · How it works · FAQ · Support Features Blocking Up to 750,000 Safari rules across five content blockers, with recommended lists, region...

CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

Reachable Assertion in Tensorflow

ImpactWhen decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a CHECK assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow processes. PatchesWe have patched the issue in GitHub...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the CheckTxVersion function. An attacker can cause a remote node to crash by sending a specially crafted protobuf transaction message with the RawData field omitted, which triggers a nil-pointer dereference...

protobuf.js security vulnerabilities

protobuf.js is an open-source implementation of the Protocol Buffer library, written entirely in JavaScript. It supports protocols for Node.js and browsers using TypeScript. It’s easy to use, extremely fast, and can be used out of the box with.proto files. Versions prior to 7.5.8 and 8.2.0 of...

CVE-2023-43632

As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcoded options” The communication with this server is done using...

EUVD-2022-29605

Malicious code in bioql PyPI...

EUVD-2025-22326

Malicious code in bioql PyPI...

EUVD-2025-22325

Malicious code in bioql PyPI...

CVE-2025-48498

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...

CVE-2025-35966

A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to...

CVE-2025-48498

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...

CVE-2025-36520

A null pointer dereference vulnerability exists in the netconnectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2025-36512

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message...

CVE-2025-48498

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...

CVE-2025-48498

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...

CVE-2025-35966

A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to...

CVE-2025-35966

Bloomberg Comdb2 8.1 is affected by CVE-2025-35966 due to a null pointer dereference in the CDB2SQLQUERY protocol buffer message handling. A specially crafted protocol buffer message sent over TCP can cause a denial of service. Talos documents confirm vulnerable versions and note exploitation via...

Bloomberg Comdb2 code issue vulnerabilities

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the netconnectmsg protocol buffer message function, which could lead to a denial of...

Bloomberg Comdb2 code issue vulnerabilities

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the CDB2SQLQUERY protocol buffer message handling, which could lead to a denial of servi...