2084 matches found
[SECURITY] Fedora 43 Update: valkey-8.1.4-2.fc43
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Active Localization of Close-Range Adversarial Acoustic Sources for Underwater Data Center Surveillance
Underwater data infrastructures offer natural cooling and enhanced physical security compared to terrestrial facilities, but are susceptible to acoustic injection attacks that can disrupt data integrity and availability. This work presents a comprehensive surveillance framework for localizing and...
Cross-site Request Forgery (CSRF)
Overview org.springframework:spring-websocket is a framework that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF vi...
PT-2025-48843
Уязвимость функции sub 422794 микропрограммного обеспечения роутеров TOTOLINK A7000R связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
PT-2025-43985
Name of the Vulnerable Software and Affected Versions D-Link DAP-2695 version 2.00RC13 Description A security issue exists in the D-Link DAP-2695. The sub 4174B0 function within the Firmware Update Handler component is susceptible to OS command injection. This allows for remote attacks. The explo...
PT-2025-48842
Уязвимость функции sub 421CF0 микропрограммного обеспечения роутеров TOTOLINK A7000R связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
CVE-2025-41704
CVE-2025-41704 describes an unauthenticated DoS against the Modbus service by sending a crafted function and sub-function code. Public sources constrain affected products to Phoenix Contact and related QUINT4 modules, with references indicating multiple QUINT4-UPS/24DC/24DC/5/EIP, 10/EIP, and 20/...
PT-2025-41854
Name of the Vulnerable Software and Affected Versions Modbus affected versions not specified Description An unauthenticated remote attacker can cause a denial of service DoS condition affecting the Modbus service. This is achieved by sending a specific function and sub-function code. The core...
The vulnerability of the sub_46409C() function in the D-Link DI-7100G router’s microprogramming software, as described in the file /msp_info.htm?flag=qos, allows a hacker to execute arbitrary commands.
The vulnerability of the sub46409C function in the /mspinfo.htm?flag=qos file of the D-Link DI-7100G router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
[SECURITY] Fedora 42 Update: valkey-8.0.6-1.fc42
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
CVE-2025-11651
Summary: CVE-2025-11651 affects UTT Progress 518G (up to V3v3.2.7-210919-161313). The flaw is in /goform/formRemoteControl, function sub_4247AC, where the Profile argument is mishandled, causing a buffer overflow. This enables remote exploitation; multiple sources note a publicly disclosed exploi...
PT-2025-48831
Уязвимость функции sub 4045A8 микропрограммного обеспечения маршрутизаторов Linksys E7350 связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код или вызвать отказ в обслуживании...
PT-2025-48825
Уязвимость функции sub 401EE0 микропрограммного обеспечения роутеров TOTOLINK A720R связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
Malicious code in jito-sub-aes-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103b0ca3b2a6d09bab1b2b0a19d08540d01dfbfe07e7eba218427c25239cfbc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32654
Malicious code in jito-sub-aes-ipheriv npm...
MAL-2025-47979 Malicious code in jito-sub-aes-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103b0ca3b2a6d09bab1b2b0a19d08540d01dfbfe07e7eba218427c25239cfbc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in jito-sub-aes-ipheriv
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...