65 matches found
wBlock
wBlock La fine delle stronzate del blocco pubblicità su Safari Un blocco contenuti per Safari su macOS, iOS e iPadOS. 750.000 regole in 5 estensioni, archiviazione con Protocol Buffer, compressione LZ4 e sincronizzazione iCloud. !NOTE Cerchi un confronto dettagliato? Dai un'occhiata alla mia guid...
CVE-2026-55558
aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...
protobuf.js 安全漏洞
protobuf.js is an open-source implementation of the Protocol Buffer library, written entirely in JavaScript. It supports protocols for Node.js and browsers using TypeScript. It’s easy to use, extremely fast, and can be used out of the box with.proto files. Versions prior to 7.5.8 and 8.2.0 of...
CVE-2023-43632
As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcoded options” The communication with this server is done using...
EUVD-2022-29605
Malicious code in bioql PyPI...
EUVD-2025-22326
Malicious code in bioql PyPI...
EUVD-2025-22325
Malicious code in bioql PyPI...
CVE-2025-48498
A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...
CVE-2025-35966
A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to...
CVE-2025-48498
A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...
CVE-2025-36520
A null pointer dereference vulnerability exists in the netconnectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability...
CVE-2025-36512
A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message...
CVE-2025-48498
A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...
CVE-2025-35966
Bloomberg Comdb2 8.1 is affected by CVE-2025-35966 due to a null pointer dereference in the CDB2SQLQUERY protocol buffer message handling. A specially crafted protocol buffer message sent over TCP can cause a denial of service. Talos documents confirm vulnerable versions and note exploitation via...
CVE-2025-35966
A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to...
Bloomberg Comdb2 Distributed Transaction Coordination Fields denial of service vulnerability
Talos Vulnerability Report TALOS-2025-2199 Bloomberg Comdb2 Distributed Transaction Coordination Fields denial of service vulnerability July 22, 2025 CVE Number CVE-2025-48498 SUMMARY A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1...
Bloomberg Comdb2 代码问题漏洞
Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the netconnectmsg protocol buffer message function, which could lead to a denial of...
Bloomberg Comdb2 代码问题漏洞
Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the CDB2SQLQUERY protocol buffer message handling, which could lead to a denial of servi...
CVE-2025-29912 CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. In versions 1.3.3 and prior, an unsigned integer underflow in the...
Square Wire 安全漏洞
Square Wire is an open source protocol buffer processing library open-sourced by Square in the United States, mainly used for efficient data serialization and deserialization. A security vulnerability exists in Square Wire versions prior to 5.2.0, which stems from not enforcing a recursion...