Linux Distros Unpatched Vulnerability : CVE-2020-0030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In binderthreadrelease of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no...

Linux Distros Unpatched Vulnerability : CVE-2025-21521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.39 and prior, 8.4.2 an...

Linux Distros Unpatched Vulnerability : CVE-2025-38100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a ta...

Linux Distros Unpatched Vulnerability : CVE-2025-37949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbusthread callstack: BUG: kernel NULL pointer dereference, address:...

Linux Distros Unpatched Vulnerability : CVE-2023-1998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel allows userspace processes to enable mitigations by calling prctl with PRSETSPECULATIONCTRL which disables the speculation feature as well as b...

Linux Distros Unpatched Vulnerability : CVE-2021-28951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in fs/iouring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service deadlock because exit may be waitin...

Linux Distros Unpatched Vulnerability : CVE-2023-31081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in drivers/media/test-drivers/vidtv/vidtvbridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtvmuxstopthread. In...

漏洞扫描工具

This is a vulnerability scanning tool, which combines multiple network security techniques to automate vulnerability detection. The tool includes four core scanning technologies: SQL injection detection, XSS detection, path traversal detection, and sensitive information disclosure detection. It...

Linux Distros Unpatched Vulnerability : CVE-2019-2025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In binderthreadread of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with...

Linux Distros Unpatched Vulnerability : CVE-2024-38582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix potential hang in nilfsdetachlogwriter Syzbot has reported a potential hang in nilfsdetachlogwriter called during nilfs2 unmount. Analysis revealed...

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

...

Linux Distros Unpatched Vulnerability : CVE-2024-26606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self- work In epoll mode, threads often depend on I/O events...

RX-INT: a Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats

Malware and cheat developers use fileless execution techniques to evade traditional, signature-based security products. These methods include various types of manual mapping, module stomping, and threadless injection which work entirely within the address space of a legitimate process, presenting...

That Time Tom Lehrer Pranked the NSA

Bluesky thread. Here's the paper, from 1957. Note reference 3...

DEBIAN-CVE-2025-38485

In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962affifoflush fxls8962affifoflush uses indiodev-activescanmask with iioforeachactivechannel without making sure the indiodev stays in buffer mode. There is a race if indiodev...

CVE-2025-38477

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is modified in qfqchangeagg called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a...

CVE-2025-38477

The CVE-2025-38477 entry concerns a race in the Linux kernel’s net/sched qfq code. A concurrent modification of agg in qfq_change_agg (invoked during qfq_enqueue) could lead to a NULL dereference in qfq_dump_class and a use-after-free in qfq_delete_class. The fix moves qfq_destroy_class into the ...

Linux Kernel macb_halt_tx() DoS

The vulnerability of the macbhalttx function in the Linux operating system’s kernel is related to mutual locking of execution threads. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Silicon Labs OpenThread RCP security vulnerability

Silicon Labs OpenThread RCP is a firmware for a coprocessor from Silicon Labs, USA. A security vulnerability exists in the Silicon Labs OpenThread RCP that stems from a failure to clear the SPI transmit buffer in a high traffic environment, which could result in the sending of corrupted packets...

CVE-2025-51865

Ai2 playground web service playground.allenai.org LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference IDOR, allowing attackers to gain sensitvie information via enumerating thread keys in the URL...