CVE-2023-53782

The CVE-2023-53782 entry is actionable and supported by connected advisories: in the Linux kernel, the DCCP error handler fix addresses an out-of-bounds access by ensuring proper checks with pskb_may_pull(), since the error handler may inspect the DCCP sequence number beyond the first 8 bytes. Th...

CVE-2023-53782

In the Linux kernel, the following vulnerability has been resolved: dccp: Fix out of bounds access in DCCP error handler There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of th...

PT-2025-49838

Name of the Vulnerable Software and Affected Versions Affected products affected versions not specified Description The software does not properly validate TCP sequence numbers in certain situations, accepting a wide range of values. This could allow a remote attacker to disrupt connection...

CVE-2025-40820: Improper Verification of Source of a Communication Channel

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only ...

PT-2025-49716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to error handling within the kcm sendmsg function when dealing with SOCK DGRAM sockets. A memory leak was initially addressed, but a...

PT-2025-49642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue existed in the DCCP error handlers. A previous fix incorrectly assumed the error handlers only accessed the first 8 bytes of the DCCP header. However, they...

PT-2026-2613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the bnxt re copy err stats function within the RDMA/bnxt re module of the Linux kernel. This flaw stems from an incorrect boundary marker when...

AMD GPU DRI Heap Overflow DoS

Vulnerability of the hwssbuildfastsequence function in the drivers/gpu/drm/amd/display/dc/core/dchwsequencer.c file – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this...

SUSE CVE-2025-65082

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through...

CVE-2025-65082

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through...

Intel Xeon Microprogramming Software

The vulnerability of Intel Xeon processor microprogramming software is related to incorrect sequence of processor instructions. Exploiting this vulnerability can allow attackers to enhance their privileges...

kernel: crypto: seqiv - Handle EBUSY correctly

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of seqiv may specify...

Beyond Detection: A Comprehensive Benchmark and Study on Representation Learning for Fine-Grained Webshell Family Classification

Malicious WebShells pose a significant and evolving threat by compromising critical digital infrastructures and endangering public services in sectors such as healthcare and finance. While the research community has made significant progress in WebShell detection i.e., distinguishing malicious...

PT-2026-2531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow issue exists in the cffrml receive function when handling packets with FCS disabled. The function extracts a length field from the packet header and subtracts 2 from...

AMD Graphics DRI dcn10_set_drr() DoS

Vulnerability of the dcn10setdrr function in the drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10hwseq.c module – The drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting this...

CVE-2025-54850

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

openSUSE 16 Security Update : tomcat11 (openSUSE-SU-2025-20106-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20106-1 advisory. Update to Tomcat 11.0.13: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled bsc1252753. -...

EUVD-2025-200032

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

CVE-2025-54850

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

CVE-2025-54848

CVE-2025-54848 affects Socomec DIRIS Digiware M-70 1.6.9, where Modbus TCP/Modbus RTU over TCP can be abused by unauthenticated Modbus TCP messages to trigger a denial-of-service. TALOS details a specific sequence of Write Single Register (code 6) messages on port 502 that changes the gateway Mod...