The vulnerability of the Dell Unity Operating Environment’s operating environment for managing and maintaining data storage allows attackers to enhance their privileges, execute arbitrary commands, and gain full control over the application. This vulnerability arises from the lack of measures taken to neutralize special elements used in the operating system’s command set.

The vulnerability of the Dell Unity Operating Environment’s operating system for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a malicious actor to...

depath and cool-path vulnerable to Prototype Pollution via `set()` Method

janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set method at setIn lib/index.js:90. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2025-28221

Tenda W6S v1.0.0.4510 has a Buffer Overflow vulnerability in the setlocaltime function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request...

Malicious code in cf-middleware-set-header (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2865 Malicious code in cf-middleware-set-header (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2023-52930

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit17 double-free A userspace with multiple threads racing I915GEMSETTILING to set the tiling to I915TILINGNONE could trigger a double free of the bit17 bitmask. Or conversely leak memory on the transition...

SUSE CVE-2023-52983

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bicsetbfqq After commit 64dc8c732f5c "block, bfq: fix possible uaf for 'bfqq-bic'", bic-bfqq will be accessed in bicsetbfqq, however, in some context bic-bfqq will be freed, and bicsetbfqq is calle...

PT-2025-20497

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2de451a329cf662b Description A vulnerability in the Linux kernel has been resolved, specifically related to the arm64 architecture. The issue involves the source register not being used for SET operations, and...

DEBIAN-CVE-2023-52929

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix cleanup after devsetname If devsetname fails, we leak nvmem-wpgpio as the cleanup does not put this. While a minimal fix for this would be to add the gpiodput call, we can do better if we split deviceregister, an...

UBUNTU-CVE-2023-52929

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix cleanup after devsetname If devsetname fails, we leak nvmem-wpgpio as the cleanup does not put this. While a minimal fix for this would be to add the gpiodput call, we can do better if we split deviceregister, an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from improper cleanup after nvmem kernel devsetname...

The vulnerability of the set_file_basic_info() function in the fs/smb/server/smb2pdu.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the setfilebasicinfo function in the fs/smb/server/smb2pdu.c module of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-26006

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest...

CVE-2025-26002

Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost...

The vulnerability of the dmub_abm_set_pipe() function in the Linux kernel driver allows a hacker to cause a service failure.

The vulnerability of the dmubabmsetpipe function in the Linux kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ethnl_set_channels() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ethnlsetchannels function in the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-29635

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...

CVE-2025-29635

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...

UBUNTU-CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtlssslsethostname...

D-Link DIR-823X 命令注入漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that stems from /goform/setprohibiting failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...