Lucene search
+L

3350 matches found

Github Security Blog
Github Security Blog
added 2026/02/06 8:59 p.m.19 views

`uniswap-utils` was removed from crates.io for malicious code

It depended on the evm-units crate, which appeared to be attempting to steal cryptocurrency...

5.3AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/02/06 11:10 a.m.9 views

Malicious Package

Overview @rsgweb/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Microsoft Secure
Microsoft Secure
added 2026/02/05 6:51 p.m.21 views

New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...

6.3AI score
SaveExploits0
NVD
NVD
added 2026/02/05 5:16 p.m.14 views

CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS0.00189EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/02/05 5:16 p.m.13 views

CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS6.1AI score0.00189EPSS
SaveExploits0References5
OSV
OSV
added 2026/02/05 5:16 p.m.16 views

UBUNTU-CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS6.1AI score0.00189EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/02/05 4:13 p.m.6 views

CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS5.8AI score0.00189EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/05 4:13 p.m.59 views

CVE-2020-37127 dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS0.00189EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/02/05 4:13 p.m.13 views

CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS5.7AI score0.00189EPSS
SaveExploits0
CVE
CVE
added 2026/02/05 4:13 p.m.36 views

CVE-2020-37127

CVE-2020-37127 affects dnsmasq-utils 2.79-1, with a buffer overflow in the dhcp_release utility. A crafted input string longer than 16 characters can trigger a core dump and terminate the dhcp_release process, causing a denial of service. Public references note the vulnerability and a potential e...

6.9CVSS5.8AI score0.00189EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/05 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-37127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessi...

6.9CVSS5.6AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/05 12:00 a.m.26 views

PT-2026-6571

Name of the Vulnerable Software and Affected Versions Dnsmasq-utils version 2.79-1 Description The software contains a buffer overflow in the dhcp release utility. An attacker can cause a denial of service by providing input exceeding 16 characters, leading to a core dump and process termination...

6.9CVSS6AI score0.00189EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
added 2026/02/04 8:08 p.m.9 views

util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

6.1CVSS5.9AI score0.00193EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/02/04 11:22 a.m.8 views

util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

6.1CVSS5.9AI score0.00193EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:00 a.m.6 views

RHEL 9 : util-linux (RHSA-2026:1913)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1913 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these...

6.1CVSS5.8AI score0.00193EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:00 a.m.11 views

Oracle Linux 8 : util-linux (ELSA-2026-1852)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-1852 advisory. 2.32.1-48.0.1 - Orabug 35995159 - report lost loop device 2.32.1-48 - fix RHEL-134296 - libblkid: use snprintf instead of sprintf - fix RHEL-133946 - login-util...

6.1CVSS5.7AI score0.00193EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/02/02 10:18 a.m.9 views

util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

6.1CVSS5.9AI score0.00193EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:00 a.m.11 views

RHEL 10 : util-linux (RHSA-2026:1696)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1696 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these...

6.1CVSS5.8AI score0.00193EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2026/01/30 10:09 p.m.12 views

gcc-toolset-15-binutils security update

An update is available for gcc-toolset-15-binutils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Binutils is a collection of binary utilities, including ar fo...

7.8CVSS6AI score0.00255EPSS
SaveExploits1
OSV
OSV
added 2026/01/30 10:09 p.m.16 views

RLSA-2026:1359 Moderate: gcc-toolset-15-binutils security update

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

5.3CVSS6AI score0.00255EPSS
SaveExploits1References2
Rows per page
Query Builder