MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to out-of-bounds writes, and remote elevation of privilege if the user's device is connected to a...

PT-2025-44964

Name of the Vulnerable Software and Affected Versions Huawei IMS affected versions not specified Description The IMS service contains a potential out-of-bounds write condition resulting from a missing bounds check. Successful exploitation could allow a remote attacker to escalate privileges. An...

PT-2025-44965

Name of the Vulnerable Software and Affected Versions Huawei Modem affected versions not specified Description The Huawei Modem contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for remote escalation of privilege if a User Equipment UE...

PT-2025-44966

Name of the Vulnerable Software and Affected Versions Huawei Modem affected versions not specified Description A heap buffer overflow exists in the Modem software that could lead to remote escalation of privilege. An attacker could exploit this by controlling a rogue base station to which a User...

Microsoft Fixes Long-Standing ‘Update and Shut Down’ Bug in Windows 11

Your Windows 11 PC will finally shut down! Learn about the KB5067036 update that fixes the decades-old restart glitch, plus new features like faster search and simpler update names...

Fedora: Security Advisory (FEDORA-2025-c50e4dfd3b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 43 Update: qt5-qtbase-5.15.17-6.fc43

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

[SECURITY] Fedora 42 Update: qt5-qtbase-5.15.17-2.fc42

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

Fedora 42 : qt5-qtbase (2025-c50e4dfd3b)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c50e4dfd3b advisory. Fix CVE-2025-5455 - QtCore Assertion Failure Denial of Service Tenable has extracted the preceding description block directly from the Fedora securi...

Ansible does not collect garbage after playbook run

A flaw was found in Ansible Base when using the awsssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality...

EUVD-2020-0023

Ansible does not collect garbage after playbook run...

GHSA-F556-49JC-4RVC Ansible does not collect garbage after playbook run

A flaw was found in Ansible Base when using the awsssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality...

CVE-2025-58149

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.17 LTS and 12.17.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

EUVD-2025-37021

AdForest - Classified Android App version 4.0.12 package name scriptsbundle.adforest, developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be...

[SECURITY] Fedora 42 Update: qt6-qtbase-6.9.3-1.fc42

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

[SECURITY] Fedora 42 Update: dtk6widget-6.0.27-10.fc42

Deepin Tool Kit WidgetDtkWidget provides the base widgets on Deepin...

Malicious code in airbnb-base-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8ad4bb6eac712ed5b01efbb7a4e455306cdf4f9114c6d604fa49af1f3c1875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48977 Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...