11896 matches found
SAP FICA ODN framework 代码注入漏洞
SAP FICA ODN framework is a component for generating official credential numbers from SAP, Germany. A code injection vulnerability exists in the SAP FICA ODN framework that originates from an elevated privilege user being able to inject the value of a local variable, potentially leading to...
ASUSTOR Backup Plan 安全漏洞
ASUSTOR Backup Plan ABP is a Windows backup tool from Hua Yun Technology ASUSTOR Inc. of Taipei, China. A security vulnerability exists in ASUSTOR Backup Plan version 2.0.7.6130 and earlier and AES version 1.0.6.6133 and earlier, which stems from an unquoted ImagePath registry value that could le...
CVE-2025-8027
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbi...
ALSA-2025:11401 Important: valkey security update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Measuring CEX-DEX Extracted Value and Searcher Profitability: the Darkest of the MEV Dark Forest
This paper provides a comprehensive empirical analysis of the economics and dynamics behind arbitrages between centralized and decentralized exchanges CEX-DEX on Ethereum. We refine heuristics to identify arbitrage transactions from on-chain data and introduce a robust empirical framework to...
Predictable Value Range from Previous Values
Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...
GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia
In a recent incident response IR case, we discovered highly customized malware targeting Exchange infrastructure within government environments. Analysis of detection logs and clues within the sample suggests that the Exchange server was likely compromised via a known N-day vulnerability. Our...
USN-7641-1 bind9 vulnerability
It was discovered that Bind incorrectly handled configurations where the stale-answer-client-timeout option is set to 0. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...
Security update for gnuplot
This update for gnuplot fixes the following issues: CVE-2025-31176: invalid read leads to segmentation fault on plot3dpoints bsc1240325. CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8copyone bsc1240326. CVE-2025-31178: unvalidated user input leads to segmentation faul...
OSV-2025-550 Use-of-uninitialized-value in CFF::cff2_cs_opset_t<cff2_cs_opset_subr_subset_t, CFF::subr_subset_param_t, CFF:
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2csopsettcff2csopsetsubrsubsett, CFF::subrsubsetparamt, CFF: cff2csopsetsubrsubsett::processop CFF::subrsubsettertcff2subrsubsettert,...
PT-2025-33572
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the comedi subsystem, specifically within the aio iiro 16 driver. An unchecked integer value from userspace, it-options1, is used as a shift amount ...
PT-2025-31561 · Git · Harfbuzz
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431867896 Crash type: Use-of-uninitialized-value Crash state: CFF::cff2 cs opset tcff2 cs opset subr subset t, CFF::subr subset param t, CFF: cff2 cs opset subr subset t::process op CFF::subr subsetter tcff2 subr subsetter t,...
PT-2025-33573
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s comedi subsystem, specifically within the pcl812 driver. An unchecked integer value, it-options1, received from userspace, can lead to a bit shift...
The vulnerability of the xmlSchemaCopyValue() function in the libxml2 library allows a attacker to trigger a service failure.
The vulnerability of the xmlSchemaCopyValue function in the libxml2 library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure through a specially created document...
OESA-2025-1820 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for commit 974cb0e3e7c9 "tipc: fix uninit-value in...
OESA-2025-1793 git security update
Security Fixes: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config...
ipvs: fix uninit-value for saddr in do_output_route4
...
fbdev: omapfb: Add 'plane' value check
...
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
...
Unspecified Vulnerability in Redis (CNVD-2025-16526)
Redis is the United States Redis company's set of open-source use of ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. Redis has a security vulnerability that could be...