Linux Distros Unpatched Vulnerability : CVE-2023-37576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitra...

Linux Distros Unpatched Vulnerability : CVE-2025-0495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values...

Linux Distros Unpatched Vulnerability : CVE-2022-35471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0. CVE-2022-35471 Note that Nessus relies on the presence of th...

Findsploit

It is an offensive tool for searching exploit databases. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool searches for exploits in local and online databases, suggesting it is a general-purpose exploit finder...

Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware

This is a PoC exploit for CVE-2019-19781, a vulnerability in Citrix ADC NetScaler that allows for unauthenticated remote code execution. The tool, called Citrixmash, was published by TrustedSec due to other researchers releasing their code first. The exploit exploits a directory traversal bug in...

firejail

This repository is an open-source Linux sandboxing platform called Firejail. It is a Linux namespaces and seccomp-bpf sandbox that allows users to run applications in a secure environment, isolating them from the rest of the system. The repository contains a variety of tools and scripts for...

Systematic Analysis of MCP Security

The Model Context Protocol MCP has emerged as a universal standard that enables AI agents to seamlessly connect with external tools, significantly enhancing their functionality. However, while MCP brings notable benefits, it also introduces significant vulnerabilities, such as Tool Poisoning...

framework_tool-0.4.5-2.1 on GA media (moderate)

frameworktool-0.4.5-2.1 on GA media Announcement ID: openSUSE-SU-2025:15445-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8...

OESA-2025-2051 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

Linux Distros Unpatched Vulnerability : CVE-2024-0124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by...

Linux Distros Unpatched Vulnerability : CVE-2025-38197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dellrbu: Fix list usage Pass the correct list head to listforeachentry when...

OPENSUSE-SU-2025:15444-1 framework_tool-0.4.5-2.1 on GA media

These are all security issues fixed in the frameworktool-0.4.5-2.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in ultra-tool-kit (npm)

The package ultra-tool-kit was found to contain malicious code...

Malicious code in impinj-is-tool (npm)

The package impinj-is-tool was found to contain malicious code...

Malicious code in run-script-astrophysics-tool-cosmochemistry (npm)

The package run-script-astrophysics-tool-cosmochemistry was found to contain malicious code...

Malicious code in neptune-tool-postcss-publish (npm)

The package neptune-tool-postcss-publish was found to contain malicious code...

MAL-2025-37038 Malicious code in tool-aquarius-terser-webpack-plugin-jekyll (npm)

The package tool-aquarius-terser-webpack-plugin-jekyll was found to contain malicious code...

Malicious code in episode-free-gems-passes-tool-home-facebook (npm)

The package episode-free-gems-passes-tool-home-facebook was found to contain malicious code...

Malicious code in tool-arcturus-luna-proxima (npm)

The package tool-arcturus-luna-proxima was found to contain malicious code...

deletenewf (1.0.0), itheima-tool-time (1.0.0) +1 more potentially affected by unknown CVE via jquey (0.0.1-security)

jquey NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf 1.0.0 - itheima-tool-time 1.0.0 - untitledfedorsh 1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23906...