CVE-2025-68180

CVE-2025-68180 is a Linux kernel DRM AMD display vulnerability: a NULL pointer dereference in odm_combine_segments_show() can occur when a connector is connected but inactive and pipe_ctx->stream_res.tg is destroyed, enabling a kernel crash. The issue is fixed in the AMDGPU display driver by c...

PT-2025-50593

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands...

Malicious Package

Overview meteor-developer-oauth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Evaluating Vulnerabilities of Connected Vehicles under Cyber Attacks by Attack-Defense Tree

Connected vehicles represent a key enabler of intelligent transportation systems, where vehicles are equipped with advanced communication, sensing, and computing technologies to interact not only with one another but also with surrounding infrastructures and the environment. Through continuous da...

EUVD-2025-201158

In the Linux kernel, the following vulnerability has been resolved: afunix: Initialise sccindex in unixaddedge. Quang Le reported that the AFUNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro. The repro consists of three stages. 1 1-a. Create a single...

UBUNTU-CVE-2025-40214

In the Linux kernel, the following vulnerability has been resolved: afunix: Initialise sccindex in unixaddedge. Quang Le reported that the AFUNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro. The repro consists of three stages. 1 1-a. Create a single...

Linux Distros Unpatched Vulnerability : CVE-2025-40214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Initialise sccindex in unixaddedge. Quang Le reported that the AFUNIX GC could garbage- collect a receive queue of an alive in-flight socket, with a nic...

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker with elevated privileges can read and write the contents of an unencrypted Appliance SSD...

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates in a physical neighbor attacker who can enable the USB port by inserting a chassis probe to elevate privileges during system...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990431 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990056 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect...

Sling TV turned privacy into a game you weren’t meant to win

Streaming service Sling TV has settled with the California Attorney General over allegations that it blocked users from exercising their privacy rights. The company will pay $530,000 after being accused of making it difficult for customers to opt out of its data collection practices. The Californ...

Secure Control of Connected and Autonomous Electrified Vehicles under Adversarial Cyber-Attacks

Connected and Autonomous Electrified Vehicles CAEV is the solution to the future smart mobility having benefits of efficient traffic flow and cleaner environmental impact. Although CAEV has advantages they are still susceptible to adversarial cyber attacks due to their autonomous electric operati...

EUVD-2025-35922

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Connected Devices Platform Service CDPSvc in Windows operating systems relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Connected Devices Platform Service CDPSvc in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

EUVD-2025-35613

Software which sets SOREUSEPORTLB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect2 and implied connect v...

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control deficiencies, which allows attackers to escalate their privileges.

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2025-43393

Name of the Vulnerable Software and Affected Versions versions prior to kernel release containing the fix affected versions not specified Description A flaw exists where the kernel does not properly validate the connection state of sockets when adding them to load-balancing groups created using t...

FreeBSD-SA-25:09.netinet

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:09.netinet Security Advisory The FreeBSD Project Topic: SOREUSEPORTLB breaks connect2 for UDP sockets Category: core Module: netinet Announced: 2025-10-22...