The vulnerability of the __smc_create() function in the net/smc/af_smc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smccreate function in the net/smc/afsmc.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerabilities of microprogramming software for AMD, Qualcomm, and Imagination allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software for AMD, Qualcomm, and Imagination relates to incorrect input of configuration data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Dell Avamar’s backup and recovery software lies in its handling of resources after their expiration or release. This allows attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of Dell Avamar’s backup and recovery software relates to operations involving resources after their expiration or release. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...

Sangfor aTrust 安全漏洞

Sangfor aTrust is a zero-trust access control system from China-based Sangfor. A security vulnerability exists in Sangfor aTrust version 2.4.10 and earlier, which originates from allowing a user to modify the ExecStartPre command...

CVE-2025-6418

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched...

Israel Says Iran Is Hacking Security Cameras for Spying

Plus: Ukrainian hackers reportedly knock out a key Russian internet provider, China’s Salt Typhoon hackers claim another victim, and the UK hits 23andMe with a hefty fine over its 2023 data breach...

POCO 安全漏洞

POCO is a cross-platform C++ library open-sourced by POCO. It is used to build web and internet based applications that run on desktop, server, mobile, IoT and embedded systems. A security vulnerability exists in POCO 1.14.1 and earlier versions, which stems from a null pointer dereference due to...

Anubis Ransomware Lists Disneyland Paris as New Victim

Anubis ransomware group claims a 64GB data breach at Disneyland Paris, leaking some engineering files and attraction plans via its dark web site...

MAL-2025-5197 Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kitten 安全漏洞

kitten is a lightweight kernel open-sourced by HobbesOSR. A security vulnerability exists in kitten, which stems from resource consumption due to incorrect operation of the function setpteat in file /include/arch-arm64/pgtable.h...

The vulnerability of the gsf_base64_encode_simple function in the structured files library. The GNOME Project’s libgsf allows attackers to compromise the confidentiality of protected information.

The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf relies on the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of the ath12k_dp_rx_process() function in the Wi-Fi driver’s code, located at drivers/net/wireless/ath/ath12k/dp_rx.c, in the Linux kernel, allows a hacker to compromise privacy.

The vulnerability of the ath12kdprxprocess function in the Wi-Fi driver’s code, located at drivers/net/wireless/ath/ath12k/dprx.c, in the Linux kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise confidentiality...

Data Breach Reporting for regulatory requirements with Microsoft Data Security Investigations​​

Seventy-four percent of organizations surveyed experienced at least one data security incident with their business data exposed in the previous year as reported in Microsoft’s Data Security Index: Trends, insights, and strategies to secure data report. Despite the best people, process and...

MAL-2025-5088 Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

MAL-2025-5014 Malicious code in test.reativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6f730b0a0fe3d91bde9a315e7378e550dc9f7227742ce7918c5caa6d9a88d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zoomcar Data Breach Exposes Personal Info of 8.4 Million Users

Zoomcar confirms 2025 breach affecting 8.4M users, echoing its 2018 data leak. Personal info exposed, financial data safe, investigation ongoing...

PT-2025-25650

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description The issue concerns improper access control on the NetScaler Management Interface in Citrix NetScaler ADC and NetScaler Gateway. Recommendations At the momen...

Adobe Acrobat Reader Information Disclosure Vulnerability (CNVD-2025-13316)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

ComfyUI 安全漏洞

ComfyUI is one of the most powerful and modular diffusion model GUIs and backends for comfyanonymous individual developers. A security vulnerability exists in ComfyUI version 0.3.40, which stems from a dynamic attribute issue that could lead to object attribute manipulation...

TencentOS Server 2: flatpak (TSSA-2024:0502)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0502 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...