cli-util 安全漏洞

cli-util is a utility function of the cli toolkit open source by cli-kit. A security vulnerability exists in cli-util version v1.1.27, which stems from the lib.merge function containing a prototype contamination vulnerability...

CVE-2024-57085: Uncontrolled Resource Consumption

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

The cli-util utility (version v1.1.27 ), part of the cli-kit toolkit, contains a prototype pollution vulnerability in the lib.merge function. An attacker can exploit this by supplying a crafted payload to cause a Denial of Service (DoS) . As a temporary workaround, it is recommended to disable th...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

SUSE-SU-2025:20003-1 Security update for util-linux

This update for util-linux fixes the following issues: Security issue fixed: - CVE-2024-28085: Properly neutralize escape sequences in wall to avoid potential account takeover. bsc1221831 Non-security issues fixed: - Fix hang of lscpu -e bsc1225598 - lscpu: Add more ARM cores bsc1223605 - Documen...

PT-2025-2364 · NetGear · Netgear Fvs336Gv3 +1

Name of the Vulnerable Software and Affected Versions: Netgear FVS336Gv2 affected versions not specified Netgear FVS336Gv3 affected versions not specified Description: The issue concerns a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute...

Malicious code in telegram-util (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 259b69f583bb3ea0fcb76890f5361a9c8e9d784fcca352a51f4dd13e7d73e1c7 Any computer that has this package installed or...

MAL-2025-629 Malicious code in telegram-util (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 259b69f583bb3ea0fcb76890f5361a9c8e9d784fcca352a51f4dd13e7d73e1c7 Any computer that has this package installed or...

PT-2025-2590 · Google · Android Wificonfigurationutil

Name of the Vulnerable Software and Affected Versions: Android WifiConfigurationUtil affected versions not specified Description: A logic error in the code of WifiConfigurationUtil.java, specifically in the validateSsid function, could lead to a local denial of service due to a possible overflow ...

CVE-2021-3996 affecting package util-linux 2.32.1-7

CVE-2021-3996 affecting package util-linux 2.32.1-7. This CVE either no longer is or was never applicable...

CVE-2021-3995 affecting package util-linux 2.32.1-7

CVE-2021-3995 affecting package util-linux 2.32.1-7. This CVE either no longer is or was never applicable...

PT-2025-49263

Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description A flaw exists in util-linux that allows a heap buffer overread when processing 256-byte usernames. This issue is specifically present within the setpwnam function and impacts SUID Set User...

MAL-2024-12129 Malicious code in aws-iot-samples-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379933a89a9078f046a3ed35489373ccc8c0e070cef4700bbd90d36f087d5569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Critical Photon OS Security Update - PHSA-2024-5.0-91-0424

Updates of 'unzip', 'patch', 'util-linux', 'libksba', 'libtar' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-5.0-0424

Updates of 'unzip', 'patch', 'libtar', 'libksba', 'util-linux' packages of Photon OS have been released...

CVE-2024-51766

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766 HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

CVE-2024-51766

The CVE-2024-51766 entry concerns HPE NonStop DISK UTIL (T9208) and affects all prior DISK UTIL versions of L-series and J-series. The connected sources indicate a local denial-of-service condition with an exploit path that requires low privileges and no user interaction, with the impact describe...

CVE-2024-51766 HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...