PT-2025-39330

Name of the Vulnerable Software and Affected Versions messageformat versions prior to 2.3.0 Description The messageformat package, a JavaScript implementation of the Unicode MessageFormat 2 specification, contains a flaw related to improper handling of message key paths. This can lead to prototyp...

messageformat 安全漏洞

messageformat is a messageformat open source ICU message format and Unicode message format library for Javascript. A security vulnerability exists in messageformat versions prior to 2.3.0 that stems from improper handling of nested message keys containing special characters, which could lead to...

CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the skbpartialcsumset function not properly handling the transfer header special value 0xFFFF, which could...

CVE-2024-45669

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...

IBM Security Verify Information Queue Denial of Service Vulnerability

IBM Security Verify Information Queue is a microservices architecture integration platform that leverages Kafka technology and a publish/subscribe model to integrate data between IBMSecurity products, acting as a cross-product data exchange hub. A denial of service vulnerability exists in IBM...

CVE-2024-45669

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...

CVE-2024-45669

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...

CVE-2024-45669 IBM Security Verify Information Queue denial of service

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...

CVE-2024-45669

CVE-2024-45669 affects IBM Security Verify Information Queue (ISIQ) versions 10.0.5–10.0.8. The vulnerability arises from improper handling of special characters, leading to uncontrolled resource consumption and a denial of service when processed remotely. The issue is documented across multiple ...

CVE-2024-45669 IBM Security Verify Information Queue denial of service

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption...

PT-2025-37093

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue versions 10.0.5 through 10.0.8 Description: IBM Security Verify Information Queue versions 10.0.5, 10.0.6, 10.0.7, and 10.0.8 may allow a remote user to cause a denial of service due to improper handling ...

Linux Distros Unpatched Vulnerability : CVE-2022-48614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS. CVE-2022-48614 Note that Nessus relies on the presence of the package as reported by the...

Malicious code in @lbnqduy2180500/special-enigma (npm)

The package @lbnqduy2180500/special-enigma was found to contain malicious code...

MAL-2025-42687 Malicious code in @lbnqduy2180500/special-enigma (npm)

The package @lbnqduy2180500/special-enigma was found to contain malicious code...

CVE-2025-57776

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

Improper handling of special tags within script contexts in html/template

...

serial: sc16is7xx: fix invalid FIFO access with special register set

...

D-Link DIR-852 os Command Injection Vulnerability

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from an os command injection vulnerability, which stems from the parameter service in the file soap.cgi...

Linux Distros Unpatched Vulnerability : CVE-2021-45474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki through 1.37, the Special:ImportFile URI aka FileImporter allows XSS, as demonstrated by the clientUrl parameter. CVE-2021-45474 Note that Nessus...