16537 matches found
CachePrune: Neural-Based Attribution Defense against Indirect Prompt Injection Attacks
Large Language Models LLMs are identified as being susceptible to indirect prompt injection attack, where the model undesirably deviates from user-provided instructions by executing tasks injected in the prompt context. This vulnerability stems from LLMs' inability to distinguish between data and...
Security update for libraw
This update for libraw fixes the following issues: CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phaseonecorrect function bsc1241585 CVE-2025-43964: Fixed tag 0x412 processing in phaseonecorrect does not enforce minimum w0 and w1 values bsc1241584 Patch Instructions: To...
CVE-2025-46672: Unchecked Return Value
NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.
...
CVE-2025-29045
Buffer Overflow vulnerability in ALFACAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the newaptext0 key value...
CVE-2025-28355
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery CSRF allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none...
quickjs:fuzz_compile: Use-of-uninitialized-value in js_bigint_to_string1
Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5821441834811392 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...
PT-2025-22180
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in skb dequeue when processing a QCA firmware crash dump on WCN7851 0489:e0f3. The issue stems from handle dump pkt qca returning 0 even when a dump...
DEBIAN-CVE-2025-46420
A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...
CVE-2025-3280
The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attributevaluefilter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...
ROS-20250424-04
The GPAC multimedia platform vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker to cause a denial of service A vulnerability in a function in gfm2tsprocesspmt of the GPAC multimedia platform is related to buffer copying without checkin...
CGI: Denial of Service in CGI::Cookie.parse
A flaw was found in Ruby's CGI gem. Processing specially crafted large cookies with the CGI::Cookie.parse method can cause excessive resource consumption due to a missing limit on the length of the raw cookie value, resulting in a denial of service...
SUSE CVE-2025-22095
In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulatorbulkget If the regulatorbulkget returns an error and no regulators are created, we need to set their number to zero. If we don't do this and the PCIe link up fails, a call to...
Yokogawa Registrars GX10 GX20 GX10 GX20 DX1000 DX2000 DX1000N
The vulnerability of the GX10, GX20, GP10, GP20, DX1000, DX2000, DX1000N, FX1000, DX1000T, DX2000T, CX1000, CX2000, R10000, and R20000 registrators, as well as the GM data collection systems and MW100 data collection devices manufactured by Yokogawa, is related to the possibility of initializing...
Routing in Spin Apps with Hono
Learn how to use Hono to build full-fledged HTTP APIs with Spin and TypeScript, including middleware, route parameters, and key-value store integration...
[SECURITY] Fedora 41 Update: rust-litemap-0.7.3-5.fc41
A key-value Map implementation based on a flat, sorted Vec...
ffmpeg:ffmpeg_dem_VQF_fuzzer: Use-of-uninitialized-value in vqf_read_header
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6253774274887680 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemVQFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
[SECURITY] Fedora 40 Update: rust-litemap-0.7.3-5.fc40
A key-value Map implementation based on a flat, sorted Vec...
Off-by-one Error
Overview Affected versions of this package are vulnerable to Off-by-one Error in the DecodeFromBytes function in bgp.go. The softwareVersionLen parameter is not checked for the case where it is set to 0. As a result, an attacker can trigger a panic by sending a malicious packet with a zero value...