PT-2022-31943

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31474

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30821

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

Malicious code in cro-staking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff0f0850bf22374744499697efcbb4c429178c55a7c05dc53cdff7e59f3ce871 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idmsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d0b1a3d0d627a0646c7fbfa5441aa70a41921ab6965e74fb89215a0368b9243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 13-pkg-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upholdsdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5a834d231fb9a9771dae82fc2a4203d704b9f006616359270894edaba9cae3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webhook-provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697ea38acf4a193645bda704d70e5d5e598227df1456666b6997d1c09ffcbacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thumb-assembler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a778dc093a4b19a51f799a5bf03fb7714d70147b42627bafbef5bb2c87e33a82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-1348

A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an...

OPC UA Legacy Java Stack Denial of Service Vulnerability

OPC UA Legacy Java Stack is a legacy support for the Java version of OPC UA from the OPC Foundation in the U.S. A denial of service vulnerability exists in OPC UA Legacy Java Stack version 2022-04-01, which stems from improper handling of a large number of message requests, and could be exploited...

Code injection

OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources...

CVE-2022-30551

OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources...

CVE-2022-30551

CVE-2022-30551 affects OPC UA Legacy Java Stack (version 2022-04-01). A remote attacker can send crafted OPC UA messages that exhaust server resources, causing the server to stop processing messages (DoS). The related records (Red Hat, CNVD, NVD, ZDI) describe the same denial-of-service impact an...

CVE-2022-26130

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an Active mode-enabled FTP profile is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing...

PT-2025-8452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the Linux kernel within the Atheros/Qualcomm wireless adapter driver. The problem occurs when a firmware recovery, triggered by ath10k core restart calling...

PT-2022-12429

Name of the Vulnerable Software and Affected Versions Terramaster F4-210, F2-210 TOS version 4.2.X 4.2.15-2107141517 Description The issue allows for the execution of arbitrary commands as root by sending specifically crafted input to the "/tos/index.php?app/app start stop" API endpoint...

PT-2025-8249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the rtllib beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously, causing...

PT-2025-8239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the ieee80211 beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously,...

CVE-2022-0949 WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users,...