83216 matches found
(0Day) Ivanti Endpoint Manager MP_Report_Run2 SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the MPReportRun2 class. The issue results from the lack of proper validation of a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987024)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987024 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The following issue was observed runni...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987102)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987102 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix stack-out-of-bounds memory access from ioapicwriteindirect KASAN reports the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986668)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986668 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in...
Hospital-Management-System SQL注入漏洞
Hospital-Management-System is a hospital management system by Karthik Individual Developer. Hospital-Management-System suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ai in the file /delete.php, which could lead to a SQL injection attack...
UBUNTU-CVE-2023-53616
In the Linux kernel, the following vulnerability has been resolved: jfs: fix invalid free of JFSIPipimap-iimap in diUnmount syzbot found an invalid-free in diUnmount: BUG: KASAN: double-free in slabfree mm/slub.c:3661 inline BUG: KASAN: double-free in kmemcachefree+0x71/0x110 mm/slub.c:3674 Free ...
CVE-2023-53587 ring-buffer: Sync IRQ works before buffer destruction
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buffer just before destruction, it may be possible maybe not in a real system, but it did happen in ARCH=um with time-travel to destroy the...
CVE-2023-53587 ring-buffer: Sync IRQ works before buffer destruction
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buffer just before destruction, it may be possible maybe not in a real system, but it did happen in ARCH=um with time-travel to destroy the...
CVE-2023-53564 ocfs2: fix defrag path triggering jbd2 ASSERT
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix defrag path triggering jbd2 ASSERT code path: ocfs2ioctlmoveextents ocfs2moveextents ocfs2defragextent ocfs2moveextent + ocfs2journalaccessdi + ocfs2splitextent //sub-paths call jbd2journalrestart + ocfs2journaldirty...
EUVD-2025-32392
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...
CVE-2025-39944
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...
CVE-2025-39944 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...
OSV-2025-808 Use-of-uninitialized-value in WebPMultRow_C
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=448792425 Crash type: Use-of-uninitialized-value Crash state: WebPMultRowC WebPMultRows WebPPictureRescale...
Friday Squid Blogging: Squid Overfishing in the Southwest Atlantic
Article. Report...
EUVD-2024-28004
Malicious code in bioql PyPI...
EUVD-2024-19389
Malicious code in bioql PyPI...
EUVD-2023-37283
Malicious code in bioql PyPI...
EUVD-2023-36349
Malicious code in bioql PyPI...