PT-2025-9008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue has been identified in the Linux kernel. The problem occurs when the sysfs -store function is called while a queue is frozen, and memory allocation with GFP...

Silicon Labs Ember ZNet security vulnerability

Silicon Labs Ember ZNet is a protocol stack software from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Ember ZNet that originates from a buffer overflow that occurs during the processing of malformed packets at the APS layer, which may result in an assertion failure...

PT-2025-3682 · Ember · Ember Znet Stack

Name of the Vulnerable Software and Affected Versions: Ember ZNet stack affected versions not specified Description: A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert. Recommendations: At the moment, there is no information about a newer...

SonicOS SSL VPN Privilege Escalation

The vulnerability of the SSL VPN remote access technology implemented on SonicOS is related to the bypassing of authentication due to a fundamental error in the implementation. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

CVE-2024-6352: Buffer Copy without Checking Size of Input

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a cyclic locking dependency issue in the Bluetooth ISO layer, which could lead to a deadlock...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a cyclic locking dependency issue in the Bluetooth ISO layer, which could lead to a deadlock...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the Bluetooth ISO layer not freeing hdev at the end of the isolistenbis function, which could lead to a memo...

PT-2025-55058

Уязвимость функции queue attr store модуля block/blk-sysfs.c поддержки блочного уровня ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

USN-7196-1 linux-azure, linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

New Research: Enhancing Botnet Detection with AI using LLMs and Similarity Search

As botnets continue to evolve, so do the techniques required to detect them. While Transport Layer Security TLS encryption is widely adopted for secure communications, botnets leverage TLS to obscure command-and-control C2 traffic. These malicious actors often have identifiable characteristics...

bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2024-55459 via keras (2.0.8)

keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2024-55459 Source advisory: OSV:GHSA-CJGQ-5QMW-RCJ...

bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2024-55459 via keras (2.0.8)

keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2024-55459 Source advisory: OSV:PYSEC-2025-121...

CVE-2024-56690

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padatadoparallel return -EBUSY Since commit 8f4f68e788c3 "crypto: pcrypt - Fix hungtask for PADATARESET", the pcrypt encryption and decryption operations return -EAGAIN when the CP...

Millions of Email Servers Exposed Due to Missing TLS Encryption

Millions of email servers worldwide remain alarmingly vulnerable to cyberattacks due to a critical security oversight: the absence of Transport Layer Security TLS encryption...

PT-2025-1019

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking CX 10000 Series Switches affected versions not specified Description A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists, which could allow an unauthenticated adjacent attacker...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from a failure of ALPN to properly validate certificates when using Alt-Svc if the originating server redirecte...