DEBIAN-CVE-2025-37874

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbeprobe error path When ngbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in ngbeprobe function, the subsequent error paths after ngbeswinit don't free the rsskey. F...

DEBIAN-CVE-2025-37872

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix memory leak in txgbeprobe error path When txgbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in txgbeprobe function, the subsequent error paths after txgbeswinit don't free the...

UBUNTU-CVE-2025-37872

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix memory leak in txgbeprobe error path When txgbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in txgbeprobe function, the subsequent error paths after txgbeswinit don't free the...

UBUNTU-CVE-2025-37874

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbeprobe error path When ngbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in ngbeprobe function, the subsequent error paths after ngbeswinit don't free the rsskey. F...

CVE-2025-37872

CVE-2025-37872 : Linux kernel fix in net: txgbe driver. The vulnerability arises when txgbe_sw_init() succeeds but error paths in txgbe_probe() fail, leaving wx->rss_key allocated (wx_init_rss_key()) and not freed, potentially leaking memory. The patch ensures rss_key is freed on error paths a...

CVE-2025-4454

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wakeonlan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2025-4445

A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wakeonlan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This...

D-Link DIR-619L 注入漏洞

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...

CVE-2025-4454: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wakeonlan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2025-28200

The Victure RX1800 (version EN_V1.0.0_r12_110933 ) is affected by a security vulnerability involving a weak default password . The password is predictably generated using the last 8 digits of the device's Mac address . This could allow an attacker to gain unauthorized access to the wireless route...

CVE-2025-28200: Weak Password Requirements

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

CVE-2025-28200

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

The vulnerability of the setDeviceName() function in the global.so library of the TOTOLink A950RG router’s software allows a intruder to execute arbitrary commands.

The vulnerability of the setDeviceName function in the global.so library of the TOTOLink A950RG router’s software is due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands by processing the...

Vulnerability of the emac_mac_tx_buf_send() function in the drivers/net/ethernet/qualcomm/emac/emac-mac.c module – A driver for supporting Qualcomm Ethernet network adapters in Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the emacmactxbufsend function in the drivers/net/ethernet/qualcomm/emac/emac-mac.c module – The Linux kernel’s Qualcomm Ethernet adapter support driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to...

CVE-2025-45847

ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function...

CVE-2025-44900

In Tenda RX3 V1.0brV16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow...

TOTOLINK A3100R 安全漏洞

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the comment parameter in setMacFilterRules failing to correctly validate the length size of the input data, no detailed...

PT-2025-20457 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue affects the wake on lan function, where manipulation of the mac argument leads to command injection. This can be initiated remotely. The vendor was contacted about this disclosure...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter mac failing to properly filter constructed command special characters, commands, and more. No details of the vulnerability are provide...

LibreOffice Improper Validation of Array Index vulnerability (May 2025) - Mac OS X

LibreOffice is prone to an improper validation of array index vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...