PT-2025-38560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the i40e driver where an invalid memory access could occur when the MAC list is empty. The list first entry function does not return NULL, potential...

PT-2025-16153

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-16112

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No details are provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...

CVE-2025-3162

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

PT-2025-14770

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions up to 0.7.1 Description A critical issue was found in InternLM LMDeploy, affecting the function load weight ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py in the component PT File Handler. The manipulation lead...

CVE-2025-3162: Deserialization of Untrusted Data

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

PT-2025-37273

Name of the Vulnerable Software and Affected Versions matrix-rust-sdk affected versions not specified Description A Denial-of-Service issue exists due to improper handling of symlinks symbolic links, which are files that point to another file or directory. Recommendations At the moment, there is ...

PT-2025-13303 · Linux +2 · Linux Kernel +2

Content removed...

PT-2025-18452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue has been found in the Linux kernel where the user can set any speed value. If the speed is greater than UINT MAX/8, it is possible to cause a division by zero. This issue was...

PT-2025-34318

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description The software contains a flaw in the parsing of PRC files, leading to an out-of-bounds read. Exploitation of this issue could allow a...

CVE-2025-29223

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt parameter in the traceRoute function...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in Linksys E5600 version v1.1.0.26, which stems from a command injection vulnerability in the pt parameter in the traceRoute function...

PT-2025-12438

Name of the Vulnerable Software and Affected Versions Linksys E5600 version 1.1.0.26 Description The issue concerns a command injection vulnerability in the runtime.pingTest function, specifically via the pt"pkgsize" parameter, located in the usrshareluaruntime.lua file. Recommendations For Links...

PT-2025-12436

Name of the Vulnerable Software and Affected Versions Linksys E5600 version 1.1.0.26 Description A command injection issue was discovered in the Linksys E5600 router, specifically via the pt parameter in the traceRoute function. Recommendations For Linksys E5600 version 1.1.0.26, consider...

PT-2025-12437

Name of the Vulnerable Software and Affected Versions Linksys E5600 version 1.1.0.26 Description The issue concerns a command injection vulnerability in the runtime.pingTest function, specifically via the pt"count" parameter, located in the usrshareluaruntime.lua file. Recommendations For Linksys...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in Linksys E5600 version V1.1.0.26, which originates from a command injection vulnerability in the ptpkgsize parameter in the runtime.pingTest function...

CVE-2025-29227: Improper Neutralization of Special Elements used in a Command

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt"pkgsize" parameter...

CVE-2025-29223: Improper Neutralization of Special Elements used in a Command

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt parameter in the traceRoute function...

PT-2025-12439

Name of the Vulnerable Software and Affected Versions Linksys E5600 version 1.1.0.26 Description A command injection issue was discovered in the runtime.emailReg function. The issue can be triggered via the pt"email" parameter. Recommendations For Linksys E5600 version 1.1.0.26, as a temporary...

CVE-2025-29226: Improper Neutralization of Special Elements used in a Command

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt"count" parameter...