Linux Distros Unpatched Vulnerability : CVE-2025-40317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regmap: slimbus: fix buscontext pointer in regmap init calls Commit 4e65bda8273c ASoC: wcd934x: fix error handling in wcd934xcodecparsedata revealed the problem...

EUVD-2025-201568

In the Linux kernel, the following vulnerability has been resolved: exfat: fix improper check of dentry.stream.validsize We found an infinite loop bug in the exFAT file system that can lead to a Denial-of-Service DoS condition. When a dentry in an exFAT filesystem is malformed, the following syst...

rxrpc: Make it so that a waiting process can be aborted

...

Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function

When an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo DToA.JSdtostr DToA.JSdtoa DToA.pow5mult where pow5mult attempts to...

Apache bRPC Rapidjson Parser DoS

The vulnerability of the rapidjson library in the json2pb RPC framework of Apache bRPC is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Huawei HarmonyOS Security Checks for Improper Standards Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an Improper Security Check Criteria vulnerability that originates from an improper security check criterion for the call module...

SUSE SLED15: grub2 / grub2-arm64-efi / grub2-i386-pc / grub2-powerpc-ieee1275 / etc (SUSE-SU-2025:4305-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4305-1 advisory. - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770:...

Exploit for Exposed IOCTL with Insufficient Access Control in Dell Dbutil

cve-2021-21551-PoC This repo contain a PoC I have done whe...

Missing Release of Resource after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime via resource exhaustion caused by improper cleanup of long-lived resources. Several components fail to correctly close or release gRPC connections, SPIFFE sources, and streaming...

CVE-2025-58488

The connected Red Hat, NVD, CVE Registry, and vendor records confirm CVE-2025-58488 affects Samsung SmartTouchCall prior to version 1.0.1.1. The root cause is improper verification of the origin of a communication channel, which could allow a remote attacker to access sensitive information. Explo...

HarmonyOS Call DoS

The vulnerability of the Call module of the HarmonyOS operating system is related to improper security checks for standard elements. Exploiting this vulnerability can allow attackers to cause service failures...

Demystifying Feature Engineering in Malware Analysis of API Call Sequences

Machine learning ML has been widely used to analyze API call sequences in malware analysis, which typically requires the expertise of domain specialists to extract relevant features from raw data. The extracted features play a critical role in malware analysis. Traditional feature extraction is...

PT-2025-54720

Name of the Vulnerable Software and Affected Versions Nodemailer affected versions not specified Description A Denial of Service DoS can occur due to the use of an unsafe function in the email address parser located in lib/addressparser/index.js. The parser attempts to flatten nested group...

CVE-2025-51682

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure through error messages returned by the JSON-RPC API. An attacker can access sensitive trace-back information, including information about the internal network configuration and server setup, by sending malformed...

CVE-2025-58308

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

SUSE-SU-2025:4305-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-61662: Fixed missing unregister call...

CVE-2025-58308

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2025-58308

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2025-58308

Huawei HarmonyOS is affected by CVE-2025-58308 via an improper criterion security check in the call module. Affected versions include HarmonyOS 5.0.1–5.1.0 and 6.0.0. The underlying issue is in the call module’s security check criteria, enabling abnormal feature behavior upon exploitation. The PT...