CVE-2025-66824

A Stored Cross-Site Scripting XSS vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meetingroom parameter and executed when users visit the Conference Info page, allowing attackers...

PT-2025-54215

Name of the Vulnerable Software and Affected Versions TrueConf Server version 5.5.2.10813 Description A Stored Cross-Site Scripting XSS issue exists in the Meeting location field within the Create/Edit Conference functionality. The issue is due to improper sanitization of user-supplied input in t...

PT-2025-53977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CIFS implementation related to the length of the VALIDATE NEGOTIATE INFO message. A commit extended the dialects from 3 to 4 but failed to adjust the...

PT-2025-54221

Name of the Vulnerable Software and Affected Versions TrueConf versions 5.5.2.10813 Description A flaw exists in TrueConf server version 5.5.2.10813 that allows for the injection of arbitrary HTML code through the conference description field. This issue is present in the Create/Edit conference...

CVE-2025-66823

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page conference url/info...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992254 advisory. In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992174 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4writeinfo I caught a null-ptr-deref bug as follows:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992388 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992430 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in powersupplygetbatteryinfo when kmalloc fail to...

Tenda M3 安全漏洞

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 heap buffer overflow vulnerability exists, the vulnerability stems from the file / goform / setInternetLanInfo function...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition when accessing TCPServerInfo::hostname, which could lead to reuse after release...

CVE-2025-66824

TrueConf Server v5.5.2.10813 is affected by a Stored XSS in the Meeting location field (Create/Edit Conference) where input in the meeting_room parameter is stored and executed on the Conference Info page, enabling full Account Takeover (ATO). Root cause: improper sanitization of user-supplied in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect length of the VALIDATENEGOTIATEINFO message, which could lead to information disclosure...

CVE-2025-66823

CVE-2025-66823 describes an HTML injection vulnerability in TrueConf Server 5.5.2.10813 in the conference description field. The issue allows an attacker to inject arbitrary HTML in Create/Edit conference functionality, with execution when the victim views the Conference Info page. Affected compo...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992258)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992258 advisory. In the Linux kernel, the following vulnerability has been resolved: loop: Check for overflow while configuring loop The userspace can configure a loop using an ioct...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992697 advisory. In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info...

PT-2025-53956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to TCP socket handling. Specifically, the sk error queue is not properly purged during socket closure, potentially leading to memory leaks and...

CVE-2025-59946

NanoMQ MQTT Broker NanoMQ is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2...

PT-2025-53768

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A buffer overflow issue exists in the strcat function within the asan interceptors.cpp file of libming. This could potentially allow for unexpected behavior or code execution. Recommendations Update to a newer...

CVE-2025-59946

NanoMQ MQTT Broker NanoMQ is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2...