EUVD-2025-37048

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

GPU-Backed-Shellcode-Execution-PoC

GPU-Backed Shellcode...

CVE-2025-60950

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2025-10348

URVE Smart Office is vulnerable to Stored XSS in report problem functionality. An attacker with a low-privileged account can upload an SVG file containing a malicious payload, which will be executed when a victim visits the URL of the uploaded resource. The resource is available to anyone without...

CVE-2025-40086 drm/xe: Don't allow evicting of BOs in same VM in array of VM binds

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...

Benchmarking NVIDIA RTX Pro 6000 Blackwell on Akamai Cloud

...

[SECURITY] Fedora 42 Update: qt6-qtsvg-6.9.3-1.fc42

Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices...

[SECURITY] Fedora 42 Update: qt6-qtcharts-6.9.3-1.fc42

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-26888)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security bypass vulnerability caused by an integer overflow in the Graphics:Canvas2D component. An attacker could exploit this vulnerability to cause a sandbox escape...

PT-2025-44376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s DRM/XE subsystem where an array of VM binds could potentially evict other buffer objects BOs within the same VM under specific conditions. This coul...

The vulnerability in the kernel modules such as drivers/gpu/drm/gma500/oaktrail_hdmi.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/gpu/drm/gma500/oaktrailhdmi.c kernel module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-60950

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

PT-2025-53015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the Intel iGPU IVPU driver related to buffer object BO unbinding. Specifically, the issue occurs when ivpu gem bo free removes a BO from the list before it...

CVE-2025-60950

The CVE-2025-60950 entry refers to an arbitrary file upload vulnerability in AIxBlock’s Data Preparation function, tied to commit f60975. The issue allows an attacker to upload a crafted SVG file that could lead to arbitrary code execution. Affected component: Data Preparation function of AIxBloc...

Google Chrome Heap Buffer Overflow Vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a heap buffer overflow vulnerability that stems from a heap buffer overflow issue in the WebGPU component. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause denial of heap...

CVE-2025-60950

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file...

Linux Distros Unpatched Vulnerability : CVE-2025-40096

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence...

CVE-2025-64094

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to 10.1.1, sanitization of the content of uploaded SVG files was not covering all possible XSS scenarios. This vulnerability exists because of an incomplete fix for CVE-2025-48378. This...

EUVD-2025-36565

DNN vulnerable to stored cross-site-scripting XSS via SVG upload...

SUSE CVE-2025-40073

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Do not validate SSPP when it is not ready Current code will validate current plane and previous plane to confirm they can share a SSPP with multi-rect mode. The SSPP is already allocated for previous plane, while current...