Author Archives: Syndicated News

Information published. Continue reading CVE-2025-61594 URI Credential Leakage Bypass over CVE-2025-27221→

Information published. Continue reading CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion→

Information published. Continue reading CVE-2025-69277 libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren’t in the main cryptographic group.→

Information published. Continue reading CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap→

Information published. Continue reading CVE-2025-11961 OOBR and OOBW in pcap_ether_aton() in libpcap→

Information published. Continue reading CVE-2025-34468 libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE→

Information published. Continue reading CVE-2025-6270 HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow→

Information published. Continue reading CVE-2024-56738 GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.→