295 matches found
CVE-2025-14103 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized user with Developer-role permissions to set pipeline variables for manually triggered jobs under certain conditions...
CVE-2025-12131 Truncated 802.15.4 packet leads to denial of service
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: virtioring: Fixed a data race by marking eventtriggered as “racy” for KCSAN. The syzbot reported a data race when accessing eventTriggered. Here is the simplified stack when the issue occurred:...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57907)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57907 advisory. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchipsaradc: fix informatio...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57908)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57908 advisory. - In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57912)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57912 advisory. - In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information...
CVE-2025-14463
The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 1.2.3.41. This is due to the plugin exposing a public AJAX endpoint wppaypalcheckoutajaxprocessorder that processes checkout results without any authentication or...
CVE-2023-4882
DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a user-triggable warning that could lead to log truncation...
CVE-2025-59803
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers e.g., JavaScript in a PDF document that execute during the signing process. When a signer reviews the document, the content appears normal. However, once the signature is applied, the...
Malicious code in pam98wyfupa98w (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 be7177fd2d56b518724377233ca5eda13a07f6252e400cfb4c1115db456b5fd8 Importing the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-d1n0...
EUVD-2017-1477
Malware in sbrugna...
EUVD-2023-36875
Malicious code in bioql PyPI...
EUVD-2024-53808
Malicious code in bioql PyPI...
EUVD-2024-53812
Malicious code in bioql PyPI...
EUVD-2024-53810
Malicious code in bioql PyPI...
EUVD-2024-53811
Malicious code in bioql PyPI...
EUVD-2024-53809
Malicious code in bioql PyPI...