4130 matches found
Malicious code in remix-run-route (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2409 Malicious code in remix-run-route (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-58089 btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...
CVE-2025-27398
A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to execute a limited set of...
CVAD: Logon Duration is not reported if "Do not process the legacy run list" group policy is enabled
Logon Duration is not logged in Citrix Director if "Do not process the legacy run list" group policy is enabled...
Linux Distros Unpatched Vulnerability : CVE-2021-43172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a ...
emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly cleaning up folio when rundelallocnocow fails...
AZL-68462 CVE-2022-49069 affecting package kernel for versions less than 5.15.54.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix by adding FPU protection for dcn30internalvalidatebw Why Below general protection fault observed when WebGL Aquarium is run for longer duration. If drm debug logs are enabled and set to 0x1f then the issue is...
PT-2025-6761 · Unknown · Usb-Convertercable Driver
Name of the Vulnerable Software and Affected Versions: USB-CONVERTERCABLE DRIVER affected versions not specified Description: A security issue has been discovered in USB-CONVERTERCABLE DRIVER, related to the insecure loading of dynamic link libraries, which could allow local attackers to...
PT-2025-6811 · Sick · Sick Meac300-Fnade4
Name of the Vulnerable Software and Affected Versions: SICK MEAC300-FNADE4 all versions Description: The issue allows a standard user to execute commands with administrative privileges using the run as function to start MEAC applications. This is possible because administrator credentials were...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: BPF: Setting the run context for the rawtp testrun callback. The syzbot reported a crash when the rawtp program was executed through the testrun interface, calling the bpfgetattachcookie helper or any other helper that accesses t...
Astra Linux – Vulnerability in golang-github-containers-buildah, libpod
A vulnerability was discovered in Buildah. The cache mounting process does not properly validate whether the user-specified paths for the cache are within our cache directory. This allows a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the...
OSV-2025-108 Use-of-uninitialized-value in decimate_dsd_run
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395207096 Crash type: Use-of-uninitialized-value Crash state: decimatedsdrun WavpackUnpackSamples fuzzer.cc...
CVE-2024-3271
A command injection vulnerability exists in the run-llama/llamaindex repository, specifically within the safeeval function. Attackers can bypass the intended security mechanism, which checks for the presence of underscores in code generated by LLM, to execute arbitrary code. This is achieved by...
CVE-2024-29848
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM...
CLSA-2025-1738696117 php: Fix of CVE-2024-8929
CVE-2024-8929: fix various heap buffer over-reads for mysqlnd - Modify spec and run-tests.php to fix extension loading during testing...
PT-2025-20625
Name of the Vulnerable Software and Affected Versions run-llama/llama index version latestv0.12.15 Description A Denial of Service DoS issue has been identified in the KnowledgeBaseWebReader class due to inadequate secure coding practices. Specifically, the lack of proper implementation of the ma...
CVE-2025-0848
A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function SetCmdlineRun of the file /goform/SetCmdlineRun of the component HTTP POST Request Handler. The manipulation of the argument wpapskcrypto5g leads to stack-based buffer overflow...
