CVE-2025-29482

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265...

libheif 安全漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder from struktur open source. A security vulnerability exists in libheif version 1.19.7, which originates from the ability of a local attacker to execute arbitrary code via SAO processing resulting in a buffer overflow...

PT-2025-15284 · Libheif +3 · Libheif +3

Name of the Vulnerable Software and Affected Versions: libheif version 1.19.7 Description: The issue allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265. This is a Buffer Overflow vulnerability. Recommendations: For libheif version 1.19.7,...

Exploit for CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC...

CLSA-2025-1742577500 Fix CVE(s): CVE-2017-12166

SECURITY UPDATE: Possible inject of arbitrary data into third-party executables or plug-ins - debian/patches/CVE-2017-12166.patch: Fix an out-of-bounds issue preventing potential stack overflow - CVE-2017-12166 UPDATE CERTIFICATES: Renew sample keys - debian/patches/sample-keys-renew.patch: Renew...

anything-llm 资源管理错误漏洞

anything-llm is an all-in-one desktop and Docker AI application open-sourced by Mintplex. A resource management error vulnerability exists in anything-llm, which stems from the fact that uploading low-sample-rate audio files may cause a site instance to crash...

PT-2025-12191 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm version 1d9452da2b92 Description: A denial of service issue arises when uploading an audio file with a very low sample rate, causing the site instance to crash. This occurs due to the localWhisper implementation,...

Malicious code in sendbird-chat-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed64b926ca67eeb78b98e8ba6fdaec0bc57f79fc486f9d178d69da4b0b92f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2219 Malicious code in sendbird-chat-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed64b926ca67eeb78b98e8ba6fdaec0bc57f79fc486f9d178d69da4b0b92f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in saml-sp-linking-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cefc3296ba659b91b026973376ed7a792b2c6c13d304e42d3742eddd7ae5ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce665e88f829ec81fed84869682431912fd05dda0ed950a4a37db218cc2c6673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-sample-accept-a-card-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9df31417aaee6da47501df51c7b5f60b6d64285d452187a4165e703683ff2f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-sample-accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04df90b1271528e15250574cc47ddead22c380a340572cb7ac29550a1c69a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lsp-sample-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3952d2630fc48e566e4d96081001b64dcc66120b7d8b6102c663f11412dbfa36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1606 Malicious code in lsp-sample-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3952d2630fc48e566e4d96081001b64dcc66120b7d8b6102c663f11412dbfa36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1633 Malicious code in threads_api_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdb5d2ffbf67e52e43a62054fde29f4de7d6c5b68dd8fb80a42606e42170325f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pw-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6a6e13078b7457900b4b0b41c62e43e878b548e8fd51baf5f2e2d9c567e90a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-notes-application (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

MAL-2025-1544 Malicious code in sample-notes-application (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

Malicious code in sample-nodejs-vsk-with-adm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268548cd4032a80297c2f7fd9c2e1171027f9ecf4fabcb35debfb7c1fbc0cc13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...