3673 matches found
CVE-2025-13397 mrubyc alloc.c mrbc_raw_realloc null pointer dereference
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is...
CVE-2025-13397 mrubyc alloc.c mrbc_raw_realloc null pointer dereference
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is...
nuclei2xray
Nuclei2Xray A tool written in Go language, used to convert Nu...
Small Language Models for Phishing Website Detection: Cost, Performance, and Privacy Trade-Offs
Phishing websites pose a major cybersecurity threat, exploiting unsuspecting users and causing significant financial and organisational harm. Traditional machine learning approaches for phishing detection often require extensive feature engineering, continuous retraining, and costly infrastructur...
mruby/c 代码问题漏洞
mruby/c is a C language library in the ITOC mruby/c team.open source. A code issue vulnerability exists in mruby/c version 3.4 and earlier, which stems from improper manipulation of the parameter ptr to function mrbcrawrealloc in file src/alloc.c, which may result in a null pointer dereference...
null pointer dereference vulnerability in mrubyc 3.4
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally...
PT-2025-47462
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc raw realloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is...
Siemens SCALANCE and RUGGEDCOM Devices Divide By Zero (CVE-2024-56567)
ad7780: division by zero in ad7780writeraw In the ad7780writeraw , val2 can be zero, which might lead to a division by zero error in DIVROUNDCLOSEST. The ad7780writeraw is based on iioinfo's writeraw. While val is explicitly declared that can be zero in read mode, val2 is not specified to be...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56610)
kcsan: Turn reportfilterlistlock into a rawspinlock, with a KCSAN- enabled PREEMPTRT kernel, we can see splats like sleeping function called from invalid context at kernel/locking/spinlockrt.c:48. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2022-25315)
In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503971;...
kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event
In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in hidreportrawevent. microsoft 0003:045E:07DA.0001: hidfieldextract called with n 128 32! swapper/0...
Malicious code in raw_snail_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29075c6d491d1b0f7b8810eb2a0a08e63381383584a5b36d88afbc243d1640a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
kernel: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call trace when calling smpprocessorid when called in preemptible kernels by using rawsmpprocessorid. smpprocessorid checks to see if preemption...
kernel: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call trace when calling smpprocessorid when called in preemptible kernels by using rawsmpprocessorid. smpprocessorid checks to see if preemption...
EUVD-2025-75864
Malicious code in rawwildebeest-appteadev npm...
Malicious code in raw_wildebeest-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb55f454188adf9445006d3818d7751950085c49046c6529cad50e0e9412989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80801
Malicious code in rawpenguin0xrequest npm...
Malicious code in raw_anteater_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ac8fb451e234d2e982635ac0a4c359eb7eaeaaea49c3e47179e5371884fc1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...