25113 matches found
CVE-2025-38528: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpers static const char fmt = "%p%"; bpftraceprintkfmt, sizeoffmt; The above BPF program isn't rejected and causes a kernel warning at runtime: Please remove unsupported %\x00 in...
CVE-2012-10058
RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server proce...
CVE-2012-10055
ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...
OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...
Linux Distros Unpatched Vulnerability : CVE-2021-20177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rul...
Malicious code in rimraf-string-aquarius-query (npm)
The package rimraf-string-aquarius-query was found to contain malicious code...
Malicious code in double-string-log-test-assert (npm)
The package double-string-log-test-assert was found to contain malicious code...
Malicious code in geodynamo-standard-meteor-string (npm)
The package geodynamo-standard-meteor-string was found to contain malicious code...
Malicious code in sandbox-encode-string-view-good (npm)
The package sandbox-encode-string-view-good was found to contain malicious code...
Malicious code in char-scale-string-object-hot (npm)
The package char-scale-string-object-hot was found to contain malicious code...
Malicious code in spectron-webdriver-materialize-string-planckscale (npm)
The package spectron-webdriver-materialize-string-planckscale was found to contain malicious code...
MAL-2025-32665 Malicious code in sandbox-encode-string-view-good (npm)
The package sandbox-encode-string-view-good was found to contain malicious code...
Malicious code in colour-string (npm)
The package colour-string was found to contain malicious code...
Malicious code in deserialize-string-scale-enum-encode (npm)
The package deserialize-string-scale-enum-encode was found to contain malicious code...
MAL-2025-24422 Malicious code in key-pi-string-byte-easy (npm)
The package key-pi-string-byte-easy was found to contain malicious code...
MAL-2025-34093 Malicious code in string-book-char-protected-deploy (npm)
The package string-book-char-protected-deploy was found to contain malicious code...
MAL-2025-34096 Malicious code in string-neuromorphic-ursa-alphard (npm)
The package string-neuromorphic-ursa-alphard was found to contain malicious code...
Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm)
The package string-magnetosphere-webdriver-mocha-uglify-js was found to contain malicious code...