CVE-2025-10666

CVE-2025-10666 concerns a buffer overflow in the D-Link DIR-825 Rev.B firmware (≤ 2.10) tied to the apply.cgi function, specifically sub_4106d4, where manipulating the countdown_time input overflows a buffer. The flaw can be exploited remotely; public PoC/exploit data exist (PacketStorm/Exploits-...

Dover Fueling Solutions ProGauge MagLink LX4 Devices

RISK EVALUATION Successful exploitation of these vulnerabilities could result in a remote attacker causing a denial-of-service condition or gaining administrative access to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

CVE-2025-56557

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...

The vulnerability of the CoreMedia component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows attackers to trigger a service failure.

The vulnerability of the CoreMedia component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Bluetooth component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of Bluetooth components in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

CVE-2025-57295

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials . Specifically, the root user account has no password set, and the H3C user account uses the default password "admin" ; both are stored in the /etc/shadow file. Attackers wi...

PT-2025-38476

Name of the Vulnerable Software and Affected Versions H3C devices versions NX15V100R015 Description H3C devices are susceptible to unauthorized access due to insecure default credentials. The root user account lacks a password, and the H3C user account utilizes the default password “admin”, both...

Threat Modeling for Enhancing Security of IoT Audio Classification Devices under a Secure Protocols Framework

The rapid proliferation of IoT nodes equipped with microphones and capable of performing on-device audio classification exposes highly sensitive data while operating under tight resource constraints. To protect against this, we present a defence-in-depth architecture comprising a security protoco...

The vulnerability of the Bluetooth component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of Bluetooth components in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2025-22675)

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is a set of operating systems developed for mobile devices.Apple macOS is a set of specialized operating systems developed specifically for Mac computers.Apple Safari is a we...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mishandling of instruction fetch unit errors in the AMD Zen architecture, which may result in failure to...

SUSE CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

CVE-2025-43349

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing a maliciously crafted video file may lead to...

CVE-2025-24133

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26 and iPadOS 26. Keyboard suggestions may display sensitive information on the lock screen...

udisks: Out-of-bounds read in UDisks Daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

udisks: Out-of-bounds read in UDisks Daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

udisks: Out-of-bounds read in UDisks Daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

DEBIAN-CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...