15736 matches found
[SECURITY] Fedora 41 Update: python3.11-3.11.11-1.fc41
Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...
CVE-2024-43050
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...
CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...
CVE-2024-43050
CVE-2024-43050 describes memory corruption arising when userspace issues IOCTL commands to the WLAN driver to issue a factory test command. Multiple sources cite this as a stack-based/memory corruption issue inside the WLAN driver, with a local attack vector and high impact on confidentiality, in...
CVE-2024-43050 Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when calling IOCTL calls from user space to issue factory test commands in the WLAN driver, which may result in memory corruption if these commands are n...
MAL-2025-985 Malicious code in shoots-api-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 78ebd73df4ce754b9e3a33af932d2b686a05716f83ccf3d7dd99029e73713acc Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...
Malicious code in shoots-api-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 78ebd73df4ce754b9e3a33af932d2b686a05716f83ccf3d7dd99029e73713acc Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...
Malicious code in evil-package-for-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a239752739844b809432df8dcc829f77e1a30400c98e4d475d703d3fd7dceb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11141 Malicious code in evil-package-for-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a239752739844b809432df8dcc829f77e1a30400c98e4d475d703d3fd7dceb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester / DevOps Test UI
Summary There are multiple vulnerabilities in Open JDK used by Rational Functional Tester RFT / DevOps Test UI Test UI. RFT/Test UI has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21208 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM for JDK,...
Malicious code in test-generator-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e14a996fe338bdf1114d3b98c7854b3d68b3e44ce835139b810ba1f5be6f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11011 Malicious code in test-generator-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e14a996fe338bdf1114d3b98c7854b3d68b3e44ce835139b810ba1f5be6f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the uclogic component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the uclogic component in the Linux operating system’s kernel is related to errors in resource management in the hidtestuclogicparseugeev2desc function. Exploiting this vulnerability can allow an attacker to cause a service failure...
sigstore-java has vulnerability with bundle verification
Summary sigstore-java has insufficient verification for a situation where a validly-signed but "mismatched" bundle is presented as proof of inclusion into a transparency log Impact This bug impacts clients using any variation of KeylessVerifier.verify The verifier may accept a bundle with an...
SUSE-SU-2024:4054-1 Security update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop
This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues: xmlgraphics-fop was updated from version 2.8 to 2.10: - Security issues fixed: CVE-2024-28168: Fixed improper restriction of XML External Entity XXE reference bsc1231428 -...
Vulnerability of components such as locking/ww_mutex/test in the Linux operating system’s kernel, allowing a hacker to trigger a service failure
The vulnerability of the locking/wwmutex/test components in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2024-40636 · Git +1 · Checker-Framework
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories function, as part...
MAL-2024-10923 Malicious code in delta-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a63f8d77e78e8b2cbc3bc3bfa80ee50373c5e9eb8cd9962c51a4a0ebec4b7cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in delta-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a63f8d77e78e8b2cbc3bc3bfa80ee50373c5e9eb8cd9962c51a4a0ebec4b7cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...