The vulnerability of the afs_extend_writeback() function in the fs/afs/write.c module of the Linux file system support module allows a hacker to gain access to protected information.

The vulnerability of the afsextendwriteback function in the fs/afs/write.c module of the Linux file system support module is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to gain access to protected information...

SUSE-SU-2025:21062-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2025-54770: Missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-54771: grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Out-of-bounds write in grubusbgetstring...

CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...

CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...

Security Bulletin: Astronomer with IBM is vulnerable to unrestricted filesystem writes due to the tar-fs package (CVE-2025-48387)

Summary Tar-fs is used by Astronomer with IBM as part of tar file processing. Vulnerability Details CVEID:CVE-2025-48387 DESCRIPTION: tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir...

FS S3150-8T2F 安全漏洞

FS S3150-8T2F is a switch from FS. A security vulnerability exists in the FS S3150-8T2F that originates from the transmission of a plaintext cookie containing a username and password, which could lead to credential disclosure...

CVE-2025-25613: Cleartext Storage of Sensitive Information

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...

CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...

CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...

CVE-2025-13425: NULL Pointer Dereference

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic index out of range and an application crash denial of service in OSV-SCALIBR...

CVE-2025-12376

CVE-2025-12376 relates to the WordPress plugin Icon List Block – Add Icon-Based Lists with Custom Styles . The vulnerability is a Server-Side Request Forgery (SSRF) arising from the plugin’s fs_api_request path, allowing authenticated attackers with Subscriber-level access and higher to trigger w...

The vulnerability of the ubifs_alloc_inode() function in the fs/ubifs/super.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ubifsallocinode function in the fs/ubifs/super.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the aio_ring_mremap() function in the fs/aio.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the aioringmremap function in the fs/aio.c module of the Linux kernel file system relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857...

The vulnerability of the tar-fs module for working with tar archives lies in the improper handling of symbolic links before accessing files. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the tar-fs module for working with tar archives is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

MAL-2025-183568 Malicious code in lomi-fuis-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976e5bbff354d21de1bbf18b3acb65ea5e749d1890366faa4db61482ce6aaa89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144263

Malicious code in verts-otimmo-fs npm...

Malicious code in verts-otimmo-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16e97f74818957e6818ce7d354c46d1a7ec12a08eb85bdd4ae2bae1c275bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2330)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : tracing: Add downwritetraceeventsem when adding trace eventCVE-2025-38539 tipc: fix null-ptr-deref when acquiring remote ip of ethernet...

PT-2025-49369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the smb3 fs context parse param function within the CIFS client. The issue occurs when fsconfig is called multiple times, where memory associat...