Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the parseExpression function in parser.go, due to the unrestricted size of input strings, which can cause the generation of large Abstract Syntax Trees ASTs. An attacker can crash...

CVE-2025-21752 btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't use btrfssetitemkeysafe on RAID stripe-extents Don't use btrfssetitemkeysafe to modify the keys in the RAID stripe-tree, as this can lead to corruption of the tree, which is caught by the checks in btrfssetitemkeysaf...

Malicious code in vis-trees (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ebeaeff0143b51c900c7ccf5b61f993cc2667850f6cd3847fc3d3c00e80b952 The OpenSSF Package Analysis project identified 'vis-trees' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

SUSE SLES15 Security Update : shadow (SUSE-SU-2024:2648-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2648-1 advisory. - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845. Tenable has extracted the preceding description...

SUSE-SU-2024:2659-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845...

SUSE-SU-2024:2658-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845...

SUSE-SU-2024:2657-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845...

SUSE-SU-2024:2648-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845...

SUSE-SU-2024:2630-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845...

Planting Trees in India: Green Team #GenerationRestoration

...

SUSE SLES12 Security Update : shadow (SUSE-SU-2024:2603-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2603-1 advisory. - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845. Tenable has extracted the preceding description...

commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

A vulnerability was found in Apache Commons-Configuration2, where a Stack Overflow Error occurs when calling ListDelimiterHandler.flattenObject, int with a cyclical object tree. This issue could allow an attacker to trigger an out-of-bounds write that could lead to memory corruption or cause a...

CVE-2023-52881

In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas from Yepeng Pan and Christian Rossow. ACK seq validation is currently following RFC 5961 5.2 guidelines: The ACK value is considered...

commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

A vulnerability was found in Apache Commons-Configuration2, where a Stack Overflow Error occurs when calling ListDelimiterHandler.flattenObject, int with a cyclical object tree. This issue could allow an attacker to trigger an out-of-bounds write that could lead to memory corruption or cause a...

CVE-2024-27082 Cacti Cross-site Scripting vulnerability when managing trees

Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular...

GHSA-9W38-P64V-XPMV Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' calling 'ListDelimiterHandler.flattenObject, int' with a cyclical object tree. Users are recommended to upgrade to versi...

Fedora: Security Advisory for jaxen (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2023-1852 shadow security update

Tools for managing accounts and shadow password files. Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...

OESA-2023-1849 shadow security update

Tools for managing accounts and shadow password files. Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...

Deepsecrets - Secrets Scanner That Understands Code

Yet another tool - why? Existing tools don't really "understand" code. Instead, they mostly parse texts. DeepSecrets expands classic regex-search approaches with semantic analysis, dangerous variable detection, and more efficient usage of entropy analysis. Code understanding supports 500+ languag...