PT-2025-39272

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27032 Description A memory corruption issue exists when loading a Picture Interchange Language PIL authenticated Virtual Machine VM. This occurs when an authenticated VM image is loaded without maintaining cache coherenc...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets, which arises from memory corruption when processing duplicate memory unmapping requests from a guest virtual machine...

PT-2025-39278

Name of the Vulnerable Software and Affected Versions versions prior to 2025-47315 Description A memory corruption issue exists when handling repeated memory unmap requests originating from a guest virtual machine. Recommendations At the moment, there is no information about a newer version that...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing guest VM messages...

CVE-2025-21476: Buffer Copy without Checking Size of Input

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

PT-2025-39266

Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description A memory corruption issue exists when parameters are passed to the Trusted Virtual Machine during the handshake process. Recommendations At the moment, there is no information about a newer version that...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption that occurs when parameters are passed to the Trusted Virtual Machine during a handshake...

PT-2025-39276

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27077 Description A memory corruption issue exists when processing messages within a guest virtual machine. The issue may lead to unpredictable behavior or system compromise. Recommendations At the moment, there is no...

MAL-2025-47492 Malicious code in react-device-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 113702b97f378bfde6af287d00821b1e3ebec6cfa164e3d263f57632210869c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nightmare

This repository is an introduction to binary exploitation and reverse engineering course based on CTF challenges, called "Nightmare". It contains a large amount of content, with over 90 challenges, laid out in a linear fashion, and well-documented write-ups explaining how to go from being handed...

Unbreakable Enterprise kernel security update

5.15.0-312.187.5.3 - HID: core: do not bypass hidhwrawrequest Benjamin Tissoires Orabug: 38454666 CVE-2025-38494 - vsock: Do not allow binding to VMADDRPORTANY Budimir Markovic Orabug: 38454665 CVE-2025-38618 - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro...

The vulnerability of the data management component of virtual machines in Hyper-V software for centralized backup and recovery management systems like PowerProtect Data Manager allows a malicious actor to execute arbitrary commands.

The vulnerability of the data management component in virtual machine environments within Hyper-V software for centralized backup and recovery management systems like PowerProtect Data Manager is related to the failure to address specific elements that could mitigate this vulnerability. Exploitin...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, sftpgo-plugin-geoipfilter, rancher-machine, dagdotdev, php-fpmexporter, kube-vip, vexctl, hivemind, kuberay-operator, gostatsd, ctop, kube-vip-cloud-provider, terraform-provider-time, vault-k8s, nats, cloud-provider-aws,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, sftpgo-plugin-geoipfilter, rancher-machine, dagdotdev, php-fpmexporter, kube-vip, vexctl, hivemind, kuberay-operator, gostatsd, ctop, kube-vip-cloud-provider, terraform-provider-time, vault-k8s, nats, cloud-provider-aws,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface, azurefile-csi-fips, nvidia-nsight-compute-13.2, karma-fips, local-path-provisioner, kube-logging-operator-custom-runner-fips, vault-k8s, terraform-provider-time, memcached-exporter-fips, karpenter-fips, apm-server-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface, azurefile-csi-fips, nvidia-nsight-compute-13.2, karma-fips, local-path-provisioner, kube-logging-operator-custom-runner-fips, vault-k8s, terraform-provider-time, memcached-exporter-fips, karpenter-fips, apm-server-fips,...

KVM: x86: use array_index_nospec with indices that come from guest

...

Inference Attacks on Encrypted Online Voting Via Traffic Analysis

Online voting enables individuals to participate in elections remotely, offering greater efficiency and accessibility in both governmental and organizational settings. As this method gains popularity, ensuring the security of online voting systems becomes increasingly vital, as the systems...

UBUNTU-CVE-2023-53438

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

CVE-2023-53438

CVE-2023-53438 : In the Linux kernel, the AMD Zen IF poison error path could misclassify context due to non-synchronous delivery of poison by the IF unit. The issue is mitigated by adding a quirk to always save the Code Segment (CS) register when poison is consumed from the IF unit banks, ensurin...