JSON Web Token (JWT) Exposure in Log Files

Brocade ASCG before 3.3.0 logs JSON Web Tokens JWT in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure. Note: The vulnerability affects both Brocade ASCG...

PT-2025-34863

Name of the Vulnerable Software and Affected Versions: Linksys E1700 version 1.0.0.4.003 Description: A vulnerability exists in the systemCommand function of the /goform/systemCommand file. Manipulation of the command argument can lead to OS command injection. The attack may be launched remotely...

RT-Thread buffer overflow vulnerability (CNVD-2025-16523)

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that originates from the operation of the parameter timeout in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacker to...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

RT-Thread Input Validation Error Vulnerability (CNVD-2025-16524)

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, and Red Hat Enterprise Linux 8.8 Extended Update Support EXTENSION. Red Hat Product Security has rated this update as having a...

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Brokering File System (BFS) in Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Brokering File System BFS in Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the SMB protocol in Microsoft Windows operating systems allows a hacker to perform a spoofing attack.

The vulnerability of the SMB protocol implementation in Microsoft Windows is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...

Nix 安全漏洞

Nix is a powerful package manager from the Nix open source. It is used for making packages. A security vulnerability exists in Nix version 2.30.0 that stems from the use of elevated privileges when building on macOS...

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the Transport Driver Interface (TDI) driver of Microsoft Windows operating systems allows a malicious actor to disclose protected information.

The vulnerability of the Transport Driver Interface TDI driver in Microsoft operating systems and Windows is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protecte...

The vulnerability of the Netlogon service in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Netlogon service in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems is related to a breach of the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Windows Performance Recorder (WPR) tool on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows Performance Recorder WPR tool on Microsoft Windows operating systems is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to cause a service failure...

ALSA-2025:10854 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: exfat: fix random stack corruption after getblock CVE-2025-22036 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes CVE-2025-21991 For more details about the security issues, including the impact, a CVSS score, acknowledgments, an...

CVE-2025-7553

CVE-2025-7553 affects D-Link DIR-818LW firmware up to 20191215. The vulnerability is in the System Time Page, where manipulation of the NTP Server parameter allows os command injection. Exploitation is possible remotely, and the exploit has been disclosed publicly. The issue is associated with de...

CVE-2025-52988

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a high privileged, local attacker to escalated their privileges to root. When a user provides specifically crafted argument...