cyanide

Cyanide By @zeroxjf — an iOS...

poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

Pin vulnerable version of requests library...

GHSA-5QVP-PR9F-2G2V poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

Pin vulnerable version of requests library...

CVE-2021-28685

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process and to interact with MSR registers. This cou...

OPENSUSE-SU-2025:20150-1 Security update for binutils

This update for binutils fixes the following issues: Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 a problem related to LTO vs fortran COMMON blocks. - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: New...

Malicious code in hitachi-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3401b57529ab84fbf4e914376a692548c9dd237dd3762b2bfa00f4d1ce658fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2016-1771

Malware in sbrugna...

CVE-2025-9407

A flaw has been found in mtons mblog up to 3.5.0. Affected by this vulnerability is an unknown functionality of the file /settings/profile. Executing manipulation of the argument signature can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and ma...

CVE-2016-10777

cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...

CVE-2024-33223

An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-55410

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-55410

An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55410

...

CVE-2024-55410

CVE-2024-55410 has been withdrawn by its CNA. Connections show a vulnerability involving the Asus GPU Tweak II Program Driver (v1.0.0.0) in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component, where crafted IOCTL requests enable arbitrary read/write actions. Public technical details are limite...

The vulnerability of the IOMap64.sys utility for monitoring and adjusting graphics adapters in Asus GPU Tweak II allows a hacker to increase their privileges.

The vulnerability of the IOMap64.sys utility for monitoring and adjusting graphics adapters in Asus GPU Tweak II is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to enhance their privileges by sending custom IOCTL requests...

PT-2024-33278 · Unknown · Secp256K1-Node

Name of the Vulnerable Software and Affected Versions: secp256k1-node versions prior to 5.0.1 secp256k1-node versions prior to 4.0.4 secp256k1-node versions prior to 3.8.1 Description: The issue affects the elliptic-based version of secp256k1-node, where the loadCompressedPublicKey function is...

ASUS GPUTweak II 安全漏洞

ASUS GPUTweak II is a driver from Asus China Inc. It is used to drive more FPS. A security vulnerability exists in ASUS GPUTweak II version v1.4.5.2, which stems from a security flaw in the component IOMap64.sys. The vulnerability can be exploited by an attacker to elevate privileges and execute...

NewStart CGSL CORE 5.05 / MAIN 5.05 : gnome-tweak-tool Vulnerability (NS-SA-2023-0022)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gnome-tweak-tool packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physica...

age and Authenticated Encryption

age is a file encryption format, tool, and library. It was made to replace one of the last remaining GnuPG use cases, but it was not made to replace GnuPG because in the last 20 years we learned that cryptographic tools work best when they are specialized and opinionated instead of flexible Swiss...

cockpit security, bug fix, and enhancement update

264.1-1.0.1 - Remove duplicate reference to server in cockpit Orabug: 33862832 - Update documentation links Orabug: 32795691 - Make documentation links point to Oracle Linux information Orabug: 30271413 Orabug: 32013095 - Fix rendering of hwinfo page on systems with some empty memory slots Orabug...