4719 matches found
Linux Function Heap Buffer Overflow DoS
The vulnerability of the lan78xxreadraweeprom function in the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-13397
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is...
CVE-2025-13397
CVE-2025-13397 affects mrubyc up to version 3.4, specifically the mrbc_raw_realloc function in src/alloc.c. The issue stems from manipulating the argument ptr, causing a null pointer dereference. The advisory notes a local attack vector and points to a patch identified as 009111904807b8567262036b...
CVE-2025-13397 mrubyc alloc.c mrbc_raw_realloc null pointer dereference
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is...
CVE-2025-13397 mrubyc alloc.c mrbc_raw_realloc null pointer dereference
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is...
nuclei2xray
Nuclei2Xray A tool written in Go language, used to convert Nu...
Small Language Models for Phishing Website Detection: Cost, Performance, and Privacy Trade-Offs
Phishing websites pose a major cybersecurity threat, exploiting unsuspecting users and causing significant financial and organisational harm. Traditional machine learning approaches for phishing detection often require extensive feature engineering, continuous retraining, and costly infrastructur...
mruby/c code issues and vulnerabilities
mruby/c is a C language library in the ITOC mruby/c team.open source. A code issue vulnerability exists in mruby/c version 3.4 and earlier, which stems from improper manipulation of the parameter ptr to function mrbcrawrealloc in file src/alloc.c, which may result in a null pointer dereference...
null pointer dereference vulnerability in mrubyc 3.4
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally...
PT-2025-47462
Name of the Vulnerable Software and Affected Versions mrubyc versions prior to 3.4 Description A security issue exists in mrubyc. The mrbc raw realloc function within the src/alloc.c file is susceptible to a null pointer dereference when the ptr argument is manipulated. This requires local access...
kimageformats:kimgio_raw_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer
Detailed Report: https://oss-fuzz.com/testcase?key=5226498161442816 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiorawfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer...
Siemens SCALANCE and RUGGEDCOM Devices Divide By Zero (CVE-2024-56567)
ad7780: division by zero in ad7780writeraw In the ad7780writeraw , val2 can be zero, which might lead to a division by zero error in DIVROUNDCLOSEST. The ad7780writeraw is based on iioinfo's writeraw. While val is explicitly declared that can be zero in read mode, val2 is not specified to be...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56610)
kcsan: Turn reportfilterlistlock into a rawspinlock, with a KCSAN- enabled PREEMPTRT kernel, we can see splats like sleeping function called from invalid context at kernel/locking/spinlockrt.c:48. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2022-25315)
In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503971;...
kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event
A flaw was found in the Linux kernel's Human Interface Device HID core. A local attacker with low privileges could exploit a shift-out-of-bounds vulnerability in the hidreportrawevent function. This occurs when the size of an integer in the snto32 function exceeds 32 bits, leading to an invalid...
Malicious code in raw_snail_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29075c6d491d1b0f7b8810eb2a0a08e63381383584a5b36d88afbc243d1640a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
kernel: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call trace when calling smpprocessorid when called in preemptible kernels by using rawsmpprocessorid. smpprocessorid checks to see if preemption...
kernel: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call trace when calling smpprocessorid when called in preemptible kernels by using rawsmpprocessorid. smpprocessorid checks to see if preemption...
Malicious code in raw_wildebeest-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb55f454188adf9445006d3818d7751950085c49046c6529cad50e0e9412989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
