Mozilla Firefox ESR Security Update (mfsa_2025-52) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

A Comparative Study and Implementation of Key Derivation Functions Standardized by NIST and IEEE

Since many applications and services require pseudorandom numbers PRNs, it is feasible to generate specific PRNs under given key values and input messages using Key Derivation Functions KDFs. These KDFs are primarily constructed based on Message Authentication Codes MACs, where the MAC serves as ...

The vulnerability of the Messages component in operating systems such as watchOS, macOS, iOS, and iPadOS allows a hacker to carry out a zero-click attack.

The vulnerability of the Messages component in operating systems such as watchOS, macOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to carry out a zero-click attack using a specially crafted iCloud link...

Vulnerability of the mt7915_txp_skb_unmap() function in the drivers/net/wireless/mediatek/mt76/mt7915/mac.c module – The driver for supporting wireless communication adapters in the Linux operating system, which allows an attacker to gain access to protected information.

Vulnerability of the mt7915txpskbunmap function in the drivers/net/wireless/mediatek/mt76/mt7915/mac.c module – The Linux kernel’s wireless adapter support driver is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow...

The vulnerability of the rtw89_mac_c2h_mrc_func{} function in the drivers/net/wireless/realtek/rtw89/mac.h file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the rtw89macc2hmrcfunc function in the drivers/net/wireless/realtek/rtw89/mac.h file of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Python DoS Vulnerability (Jun 2025) - Mac OS X

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

The vulnerability of the Microsoft AutoUpdate (MAU) for Mac application, which involves insufficient validation of input data, allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft AutoUpdate MAU for Mac application related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Wireshark Security Update (wnpa-sec-2023-22) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

PT-2025-26241 · Ubiquiti · Unifi Network Application

Name of the Vulnerable Software and Affected Versions: UniFi Network versions 9.1.120 and earlier Description: A misconfigured query in UniFi Network could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication,...

UBUNTU-CVE-2022-50164

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station association, if station queues are disabled for some reason, the related lists are not emptied. So if some new element is added to the list ...

DEBIAN-CVE-2025-38020

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be...

Google Chrome Security Update (stable-channel-update-for-desktop_17-2025-06) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

The vulnerability of the bs_SetMacBlack() function in the libshare-0.0.26.so library of the LB-LINK router software allows a attacker to execute arbitrary commands.

The vulnerability of the bsSetMacBlack function in the libshare-0.0.26.so library of the LB-LINK router software is related to the lack of data cleaning measures at the control level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: txgbe: fixed a memory leak in the error handling path of txgbeprobe When txgbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in the txgbeprobe function, the subsequent error handling paths d...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Disabled MACsec offload for uplink representative profiles MACsec offload is not supported in the switchdev mode for uplink representatives. When switching to the uplink representative profile, the MACsec offload...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: ngbe: fixed a memory leak in the ngbeprobe error path. When ngbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in the ngbeprobe function, the subsequent error paths after ngbeswinit do not...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k – Fixed a memory leak in ath12kservicereadyextevent. Currently, in ath12kservicereadyextevent, svcrdyext.macPhyCaps is not freed in the failed case, resulting in a memory leak. The following trace is observed in...

CVE-2025-6115

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this issue is the function formmacfilter. The manipulation of the argument machostname%d/schedname%d leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclos...

CVE-2025-6110

A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14408. This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 version 1.2.0.14408 suffers from a buffer overflow vulnerability that originates from the page parameter of the /goform/SafeMacFilter file failing to correctly validate the length of the input data, which can be exploited by...