AZL-66122 CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

DEBIAN-CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

can: bcm: add locking for bcm_op runtime updates

...

CVE-2025-8656

Kenwood DMX958XR is affected by a vulnerability in the libSystemLib library where update-version validation is missing. This allows physically present attackers to downgrade software without authentication. The issue can enable arbitrary code execution in the context of root when combined with ot...

CVE-2025-8656 Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability

Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows physically present attackers to downgrade software on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

PT-2025-31904 · Zscaler · Zscaler

Name of the Vulnerable Software and Affected Versions: Zscaler affected versions not specified Description: An improper verification of a cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed for authentication abuse. Recommendations: At the moment, there i...

Analyzing the Mirai IoT Botnet and Its Recent Variants: Satori, Mukashi, Moobot, and Sonic

Mirai is undoubtedly one of the most significant Internet of Things IoT botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed its predecessors. Its developers released the source code, which triggered the development of several...

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-8321

The CVE-2025-8321 issue affects Tesla Wall Connector firmware, arising from the upgrade feature lacking an anti-downgrade control. The vulnerability allows physically present attackers, with no authentication, to run arbitrary code in the device context by exploiting the firmware upgrade mechanis...

Tesla Wall Connector 安全漏洞

The Tesla Wall Connector is a wall charger from Tesla USA. A security vulnerability exists in the Tesla Wall Connector, which stems from a lack of an anti-degradation mechanism in the firmware upgrade feature that could lead to arbitrary code execution...

A Novel Post-Quantum Secure Digital Signature Scheme Based on Neural Network

Digital signatures are fundamental cryptographic primitives that ensure the authenticity and integrity of digital documents. In the post-quantum era, classical public key-based signature schemes become vulnerable to brute-force and key-recovery attacks due to the computational power of quantum...

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

PT-2025-30836 · Unknown · Chavara Matrimony Site

Name of the Vulnerable Software and Affected Versions: Chavara Matrimony Site version 2.0 Description: An issue exists in the OTP mechanism that allows attackers to bypass authentication by submitting a crafted request. Recommendations: At the moment, there is no information about a newer version...

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

CVE-2025-45777

CVE-2025-45777 affects the Chavara Matrimony Site (Chavara Family Welfare Centre) v2.0. The issue resides in the site’s OTP authentication mechanism, where a crafted request can bypass authentication. The available connected documents confirm the affected product (Chavara Matrimony Site version 2...

CVE-2025-45777

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request...

USN-7651-5 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...