1638 matches found
EUVD-2025-205461
NanoMQ MQTT Broker NanoMQ is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2...
CVE-2025-59946 NanoMQ has a Use After Free vulnerability via sub info list
NanoMQ MQTT Broker NanoMQ is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2...
CVE-2025-59946 NanoMQ has a Use After Free vulnerability via sub info list
NanoMQ MQTT Broker NanoMQ is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2...
CVE-2025-59946
CVE-2025-59946 affects NanoMQ (NanoMQ) prior to version 0.24.2, due to a data racing issue in the subscription info/list handling that could cause a heap use-after-free crash. The issue has been patched in version 0.24.2. The CVSS vector from the initial entry indicates high severity with network...
PT-2025-53615
Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.2 Description NanoMQ MQTT Broker contains a data racing issue related to the sub info list, potentially leading to a heap use after free crash. Recommendations Update to version 0.24.2 or later...
CVE-2025-15081
A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub4780 of the file /jdcapi. Such manipulation of the argument ddnsname leads to command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...
EUVD-2025-205379
A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub4780 of the file /jdcapi. Such manipulation of the argument ddnsname leads to command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...
intel-opencl-poc
Intel OpenCL PoC...
PT-2025-53404
Name of the Vulnerable Software and Affected Versions JD Cloud BE6500 version 4.4.1.r4308 Description A command injection issue exists in JD Cloud BE6500 version 4.4.1.r4308. The issue is located in the /jdcapi file and affects the sub 4780 function. Manipulation of the ddns name argument can lea...
EUVD-2023-60359
In the Linux kernel, the following vulnerability has been resolved: bpf: Add preemptcountsub,add into btf id deny list The recursion check in bpfprogenter and bpfprogexit leave preemptcountsub,add unprotected. When attaching trampoline to them we get panic as follows, 867.843050 BUG: TASK stack...
CVE-2023-54086
The CVE targets the Linux kernel’s BPF trampoline handling. It describes a vulnerability where preempt_count_sub/add was left unprotected in __bpf_prog_enter_recur/__bpf_prog_exit_recur, causing panics and stack/IRQ guard page errors when trampolines are attached. The fix is to add these two func...
CVE-2023-54086 bpf: Add preempt_count_{sub,add} into btf id deny list
In the Linux kernel, the following vulnerability has been resolved: bpf: Add preemptcountsub,add into btf id deny list The recursion check in bpfprogenter and bpfprogexit leave preemptcountsub,add unprotected. When attaching trampoline to them we get panic as follows, 867.843050 BUG: TASK stack...
[SECURITY] Fedora 42 Update: mqttcli-0.2.8-1.fc42
mqttcli provides two programs pub and sub that allow command-line access to an MQTT broker. sub subscribes to a topic and prints messages received to standard output. pub publishes the provided message to the provided topic. Both programs accept flags that can be provided as a config file...
Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Denial of Service (DoS) due to tar
Summary tar is used by IBM watsonx Orchestrate Developer Edition as part of image: tools-runtime Vulnerability Details CVEID:CVE-2024-28863 DESCRIPTION: node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process...
CVE-2025-65431
An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferredusername as the identifier for third-party provider accounts. That value may be mutable and should therefore be avoided for authorization decisions. The providers are now using sub instead...
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
...
CVE-2025-50401
Mercury D196G d196gv1-cn-up2020-01-0911.21.44 is vulnerable to Buffer Overflow in the function sub404CAEDC via the parameter password...
CAPIO: Safe Kernel-Bypass of Commodity Devices Using Capabilities
Securing low-latency I/O in commodity systems forces a fundamental trade-off: rely on the kernel's high overhead mediated interface, or bypass it entirely, exposing sensitive hardware resources to userspace and creating new vulnerabilities. This dilemma stems from a hardware granularity mismatch:...
