6950 matches found
CVE-2025-38514
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AFRXRPC service socket is opened and bound, but calls are preallocated, then rxrpcallocincomingcall will oops because the rxrpcbacklog struct doesn't get...
CVE-2025-38513
In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zdmactxtodev There is a potential NULL pointer dereference in zdmactxtodev. For example, the following is possible: T0 T1 zdmactxtodev / len == skbqueuelenq / while len...
CVE-2025-38506
In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SNP guest with a sufficiently large amount of memory 1TB+, the host can experience CPU soft lockups when running an operation in...
CVE-2025-38505
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When operating in concurrent STA/AP mode with host MLME enabled, the firmware incorrectly sends disassociation frames to the STA interface when clients disconnect...
CVE-2025-38502
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Given two programs each utilizing a cgroup local storage with a different value size,...
CVE-2025-38501
In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client connections. This patch limit repeated...
CVE-2025-8959
HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...
CVE-2025-24975
Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface is used when...
CVE-2025-54989
Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It leads to NULL pointer dereference and Do...
CVE-2025-53859
NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happe...
Malicious code in updated-coin-master-free-spins-daily-2023-dkzkd (npm)
The package updated-coin-master-free-spins-daily-2023-dkzkd was found to contain malicious code...
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-ron (npm)
The package cash-app-money-generator-new-updated-2023-nhfy702r-ron was found to contain malicious code...
Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-ftr (npm)
The package updated-tricks-robux-generator-free2023-ss1nujjg-ftr was found to contain malicious code...
MAL-2025-37905 Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm)
The package updated-tricks-robux-generator-free2023-ss1nujjg-pba was found to contain malicious code...
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-erp (npm)
The package cash-app-money-generator-new-updated-2023-nhfy702r-erp was found to contain malicious code...
MAL-2025-37907 Malicious code in updated-tricks-v-bucks-generator-free_2023-bbi7zrezw (npm)
The package updated-tricks-v-bucks-generator-free2023-bbi7zrezw was found to contain malicious code...
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-fft (npm)
The package cash-app-money-generator-new-updated-2023-nhfy702r-fft was found to contain malicious code...
MAL-2025-37901 Malicious code in updated-asphalt-9-legends-tokens-generator (npm)
The package updated-asphalt-9-legends-tokens-generator was found to contain malicious code...