CVE-2025-38171 power: supply: max77705: Fix workqueue error handling in probe

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The createsinglethreadworkqueue doesn't return error pointers, it returns NULL. Also cleanup the workqueue on the error paths...

CVE-2025-38100

CVE-2025-38100 affects the Linux kernel (x86/iopl). The issue arises when a task with TIF_IO_BITMAP set lacks an installed bitmap, causing tss_update_io_bitmap() to dereference NULL. Two problems are fixed: (1) io_bitmap_exit() no longer calls task_update_io_bitmap() for non-current tasks (cleanu...

CVE-2025-38100 x86/iopl: Cure TIF_IO_BITMAP inconsistencies

In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...

CVE-2025-38100 x86/iopl: Cure TIF_IO_BITMAP inconsistencies

In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...

WordPress多款产品 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerabilit...

PT-2025-27756 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the power supply max77705 driver. The issue concerned error handling in the workqueue. The function create...

Citizen 跨站脚本漏洞

Citizen is a beautiful, easy-to-use and responsive MediaWiki skin from the Star Citizen Wiki team. A cross-site scripting vulnerability exists in Citizen versions prior to 1.9.4 through 3.4.0, which stems from a short description inserted by the ShortDescription extension that is not properly...

IGEL OS 安全漏洞

IGEL OS is a terminal operating system from the German company IGEL. A security vulnerability exists in IGEL OS versions prior to 11.04.270 that stems from improper input cleanup of the Secure Terminal and Secure Shadow services, which could lead to remote code execution...

The vulnerability of the TR-069 protocol implementation (tr069/tr069_uci.c) in network board microcomputer software from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the TR-069 protocol implementation tr069/tr069uci.c of networking devices from ASR Microelectronics’ ASR1803L, ASR1806, ASR1901, and ASR1903L models is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an unauthorized attacker to ga...

The vulnerability of the TR-069 protocol implementation (tr069/tr098.c) of the network board microprogramming software from ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the TR-069 protocol implementation tr069/tr098.c of the network board microcomputer software ASR Microelectronics ASR1803L, ASR1806, ASR1901, and ASR1903L is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an unauthorized attacker...

The vulnerability of microprogrammed network boards from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, arises due to improper cleaning or release of resources. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of microprogrammed network board software from ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, stems from improper cleaning or release of resources during the processing of the pb.c file router/phonebook/pb.c. Exploiting this vulnerability can...

Pi-hole 操作系统命令注入漏洞

Pi-hole is a web-grade ad-blocking application from Pi-hole, Inc. An operating system command injection vulnerability exists in Pi-hole 3.3 and earlier versions, which stems from improper parameter cleanup when adding a domain name to the allowed list, which could lead to command injection...

The vulnerability of the Connection Manager module (con_mgr) in microprogrammed network devices from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Connection Manager conmgr module in microprogrammed network devices from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to gain unauthoriz...

ROS-20250703-03

A vulnerability in the pgAdmin 4 database management tool is related to improper data cleanup, provided by the user. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code. remotely to execute arbitrary code...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper resource cleanup, which could lead to reuse after release...

WordPress多款产品 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerabilit...

The vulnerability of microprogrammed network boards from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, arises due to improper cleaning or release of resources. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of microprogrammed network board software from ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, stems from improper cleaning or release of resources during the processing of the router/sms/sms.c file. Exploiting this vulnerability can allow an...

The vulnerability of the Traffic Service service (traffic_stat/traffic_service/traffic_service.c) in the network device software developed by ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Traffic Service service trafficstat/trafficservice/trafficservice.c of the network card microprogramming software from ASR Microelectronics, models ASR1803L, ASR1806, ASR1901, and ASR1903L, is related to improper cleaning or release of resources. Exploiting this...

Malicious code in dotenv-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983b0b06a5013d619d699ddcdaf39ce8118a63537d7243760571684111b2c921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fneves-my-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815b581bf6795de9c99486eb17b7d30b47b6d5619cb296f97499f4149b9231c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...