5702 matches found
CVE-2025-65095: Improper Neutralization of Input During Web Page Generation
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1...
kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling
In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfscchangeclass when...
A Unified Compositional View of Attack Tree Metrics
Attack trees ATs are popular graphical models for reasoning about the security of complex systems, allowing for the quantification of risk through so-called AT metrics. A large variety of different such AT metrics have been proposed, and despite their wide-spread practical use, no systematic...
Mozilla Firefox ESR < 52.2
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-16 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer...
1k-tasks (>=4.0.0, <=4.2.2), @514labs/sloan-mcp (0.0.68) +1197 more potentially affected by CVE-2025-64756 via glob (>=11.0.0, <=11.0.3)
glob NPM version =11.0.0, =4.0.0, =0.1.0, =4.10.0, =16.5.13, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.5-alpha.2, =0.1.4-alpha.0, =0.1.1, =0.1.6 and more Source cves: CVE-2025-64756 Source advisory: OSV:GHSA-5J98-MCP5-4VW2...
Adaptive Dual-Layer Web Application Firewall (ADL-WAF) Leveraging Machine Learning for Enhanced Anomaly and Threat Detection
Web Application Firewalls are crucial for protecting web applications against a wide range of cyber threats. Traditional Web Application Firewalls often struggle to effectively distinguish between malicious and legitimate traffic, leading to limited efficacy in threat detection. To overcome these...
The vulnerability of the `__genradix_iter_peek()` function in the `include/linux/generic-radix-tree.h` module of the Linux kernel allows a hacker to trigger a system failure.
The vulnerability of the genradixiterpeek function in the include/linux/generic-radix-tree.h module of the Linux kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2025-40113
In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded by the boot firmware. When preparing ...
Malicious code in scale-hot-tree-cache-execute (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca31f523c05889fdf9ef41a4517c7fe41532a653c9225ca1d2fc0b4f96c7b705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176141
Malicious code in sun-kernel-nu-tree-simulate npm...
EUVD-2025-175884
Malicious code in tree-awk-notify-beta-cloud npm...
EUVD-2025-175882
Malicious code in tree-notify-fire-resolve-scale npm...
EUVD-2025-175881
Malicious code in tree-notify-report-decrypt-scale npm...
EUVD-2025-175880
Malicious code in tree-psi-air-moon-air npm...
EUVD-2025-175879
Malicious code in tree-validate-info-signal-abstract npm...
EUVD-2025-175846
Malicious code in uglify-zeta-tree-delta-runtime npm...
EUVD-2025-177791
Malicious code in mock-easy-tree-long-cloud npm...
EUVD-2025-177537
Malicious code in notify-beta-tree-mock-minify npm...