210 matches found
SUSE-SU-2025:02837-1 Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: Updated to go1.24.6 released 2025-08-06 bsc1236217: - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go bsc1246118 - CVE-2025-47906: Fixed incorrect expansion of '', '.' and '..' in some PATH...
Linux Distros Unpatched Vulnerability : CVE-2025-2584
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function...
Malicious code in sunruse-influx-toolchain (npm)
The package sunruse-influx-toolchain was found to contain malicious code...
MAL-2025-34183 Malicious code in sunruse-influx-toolchain (npm)
The package sunruse-influx-toolchain was found to contain malicious code...
ROOT-OS-DEBIAN-12-CVE-2023-29934 CVE-2023-29934 in rootio-llvm-toolchain-14 - Patched by Root
Root has patched CVE-2023-29934 in the rootio-llvm-toolchain-14 package for Root:Debian:12. Multiple fixed versions available...
osx-security-awesome
It is an offensive tool for collecting and categorizing OSX and iOS security resources. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool appears to be collecting resources related to OSX and iOS security. The...
Auto-SGCR: Automated Generation of Smart Grid Cyber Range Using IEC 61850 Standard Models
Digitalization of power grids have made them increasingly susceptible to cyber-attacks in the past decade. Iterative cybersecurity testing is indispensable to counter emerging attack vectors and to ensure dependability of critical infrastructure. Furthermore, these can be used to evaluate...
MGASA-2025-0205 Updated golang packages fix security vulnerabilities
Various uses of the Go toolchain in untrusted VCS repositories can result in unexpected code execution. When using the Go toolchain in directories fetched using various VCS tools such as directly cloning Git or Mercurial repositories can cause the toolchain to execute unexpected commands, if said...
Updated golang packages fix security vulnerabilities
Various uses of the Go toolchain in untrusted VCS repositories can result in unexpected code execution. When using the Go toolchain in directories fetched using various VCS tools such as directly cloning Git or Mercurial repositories can cause the toolchain to execute unexpected commands, if said...
The vulnerability of the mlir::Block::getArgument component, a set of tools for developing LLVM Toolchain, allows a attacker to trigger a service failure.
The vulnerability of the mlir::Block::getArgument component in the LLVM Toolchain development tools set is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the LLVM Toolchain development tools relates to the execution of operations outside of the buffer in memory, allowing an attacker to trigger a service failure.
The vulnerability of the LLVM Toolchain development tools is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability in the LLVM Toolchain development tools, related to reading data beyond the buffer boundary, allows a attacker to trigger a service failure.
The vulnerability of the LLVM Toolchain development tools is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the LLVM Toolchain development tools relates to reading data beyond the allowed buffer boundaries, allowing an attacker to trigger a service failure.
The vulnerability of the LLVM Toolchain development tools is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
TencentOS Server 4: gcc (TSSA-2025:0132)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0132 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2023-28479
An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full development toolchain within every TigerGraph deployment. An attacker is able to compile new executables on each Tigergraph system and modify system and Tigergraph binaries...
PYSEC-2025-228
A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can ...
Malicious code in build-toolchain (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84247c237b0069d75302ed5c41a15415446a4acfd0ec02984a32130adb4e03fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Astra Linux – Vulnerability in llvm-toolchain-15
It was discovered that the commit a0138390 from the llvm-project contains a segmentation fault due to the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...