The vulnerability in the Linux operating system’s component fs/hfsplus/extents.c allows a hacker to trigger a service failure.

The vulnerability of the fs/hfsplus/extents.c component in the Linux operating system is related to insufficient blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-49022

Name of the Vulnerable Software and Affected Versions XunRuiCMS versions up to 4.7.1 Description A security flaw exists in XunRuiCMS, specifically within the Email Setting Handler component. The issue involves server-side request forgery, potentially allowing remote exploitation. The flaw is...

Linux Distros Unpatched Vulnerability : CVE-2025-40250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the othe...

Oracle Linux 8 : edk2 (ELSA-2025-20669)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20669 advisory. - EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause Protection Mechanism Failure by local access Orabug: 38381983 CVE-2025-3770 ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrectly removing an entire rmap when cleaning up a failed IRQ allocation, which could lead to a crash...

The vulnerability in the net/netfilter/nf_bpf_link.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/netfilter/nfbpflink.c component in the Linux operating system is related to insufficient blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the quirks component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the quirks component of the Linux operating system’s kernel is related to a violation of expected behavior. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-49055

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mm/damon/sysfs interface. This interface dynamically allocates a damon ctx object for testing the validity of inputs for online DAMON...

PT-2025-49051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel driver allocates memory for sensor data using devm kzalloc, but lacks a check to ensure the allocation was successful. If memory allocation fails, attempting to...

Linux Distros Unpatched Vulnerability : CVE-2025-40256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: also call xfrmstatedeletetunnel at destroy time for states that were never added In commit b441cf3f8c4b xfrm: delete x-tunnel as we delete x, I missed the...

CVE-2025-29864

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29...

CVE-2025-29864

ESTsoft ALZip on Windows (versions 12.01 up to 12.29 exclusive) is affected by a Protection Mechanism Failure that allows bypassing the SmartScreen protection. The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNNVD, EUVD, CIRCL, etc.) as a SmartScreen bypass due ...

CVE-2025-10304

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the processstatusunlink function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticated...

CVE-2025-10304

CVE-2025-10304 concerns the Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin. Wordfence’s vulnerability detail confirms a missing capability check on process_status_unlink() across all versions up to 2.3.8, enabling unauthenticated attackers to delete backup progress f...

PT-2025-48798

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29...

Vulnerability of the ice_dpll_init_rclk pins() function in the module drivers/net/ethernet/intel/ice/ice_dpll.c – a driver for supporting Ethernet network adapters in Intel’s Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the icedpllinitrclk pins function in the drivers/net/ethernet/intel/ice/icedpll.c file is related to the Linux kernel’s Ethernet network adapter support driver. This vulnerability arises from the failure to release resources after their useful life has expired. Exploiting thi...

The vulnerability of the udf_fiiter_init() function in the fs/udf/directory.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the udffiiterinit function in the fs/udf/directory.c module of the Linux file system support module is related to the lack of checking of the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tipc_nl_bearer_add() function in the net/tipc/bearer.c module of the TIPC protocol implementation in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the tipcnlbeareradd function in the net/tipc/bearer.c module of the TIPC protocol in the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the huge_memory.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the hugememory.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the /net/phy/phy_device.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the /net/phy/phydevice.c component of the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability allows an attacker to cause service failures...