356 matches found
EUVD-2025-23800
Malicious code in bioql PyPI...
EUVD-2024-1371
Malicious code in bioql PyPI...
ExploitRemotingService
This is a .NET Remoting Service exploit tool. It is a proof-of-concept PoC exploit for a vulnerability in the .NET Remoting Service. The tool is designed to demonstrate the exploitation of this vulnerability, which allows an attacker to execute arbitrary code on a remote system. The tool consists...
drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink
...
CVE-2025-38649
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight An infinite loop has been created by the Coresight devices. When only a source device is enabled, the coresightfindactivatedsysfssink function is...
UBUNTU-CVE-2025-38649
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight An infinite loop has been created by the Coresight devices. When only a source device is enabled, the coresightfindactivatedsysfssink function is...
CVE-2025-38649 arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight An infinite loop has been created by the Coresight devices. When only a source device is enabled, the coresightfindactivatedsysfssink function is...
CVE-2025-21474
Memory corruption while processing commands from A2dp sink command queue...
Linux Distros Unpatched Vulnerability : CVE-2022-22737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a...
CVE-2025-21474
Memory corruption while processing commands from A2dp sink command queue...
CVE-2025-21474
CVE-2025-21474 describes a memory corruption issue in Qualcomm chipsets triggered while processing commands from the A2dp sink command queue. The root cause is related to memory handling during queue processing, with the CVSSv3.1 base metrics indicating HIGH impact on confidentiality, integrity, ...
CVE-2025-21474 Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue...
CVE-2025-21474 Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue...
Qualcomm Chipsets 资源管理错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from processing commands in the A2dp sink command queue could result in memory corruption...
CVE-2025-21474: Use After Free
Memory corruption while processing commands from A2dp sink command queue...
The vulnerability of the `create_validate_stream_for_sink()` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the createvalidatestreamforsink function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
FaultLine: Automated Proof-Of-Vulnerability Generation Using LLM Agents
Despite the critical threat posed by software security vulnerabilities, reports are often incomplete, lacking the proof-of-vulnerability PoV tests needed to validate fixes and prevent regressions. These tests are crucial not only for ensuring patches work, but also for helping developers understa...
CVE-2024-4536
In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component https://github.com/eclipse-edc/Connector , an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security...
CVE-2022-20552
In btifa2dpsinkcommandready of btifa2dpsink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...