10218 matches found
SUSE CVE-2025-38729
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too...
VIPER_2025
VIPER 2025 VIPER 2025 is an advanced, modular penetration...
CVE-2025-38705 drm/amd/pm: fix null pointer access
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerprofilemode for the CUSTOM profile will result in a null pointer dereference...
iommu/amd: Avoid stack buffer overflow from kernel cmdline
...
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
...
drm/amd/display: Check phantom_stream before it is used
...
drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
...
drm/amd/display: fix incorrect mpc_combine array size
...
WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Anonymous in WordPress Plugin Advanced Ads – Tracking versions 3.0.7...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the AVX-512 state function not checking for NULL pointers...
drm/amd/display: Wake DMCUB before executing GPINT commands
...
drm/amd/display: Do not return negative stream id for array
...
drm/amd/display: Check null pointers before multiple uses
...
drm/amd/display: Handle dml allocation failure to avoid crash
...
drm/amd/display: fix a UBSAN warning in DML2.1
...
CVE-2025-9694
A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...
AVX-Based Timing Side Channel — ASLR Detection
This work demonstrates a technique for detecting ASLR using AVX memory load instructions combined with RDTSCP timing and SIGSEGV detection. It illustrates how side-channel timing measurements can be applied to analyze memory layout randomization...
CVE-2025-38676
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...
WordPress ACF Recent Posts Widget plugin <= 5.9.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin ACF Recent Posts Widget versions = 5.9.3...
CVE-2025-9694
A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...