CVE-2025-14038

EDB Hybrid Manager is affected by an unauthenticated-access flaw that allows direct access to certain gRPC endpoints due to a misconfiguration in the Istio Gateway, bypassing authentication and authorization. This can lead to potential data disclosure or denial-of-service by sending malformed dat...

EnterpriseDB Hybrid Manager - LTS 安全漏洞

EnterpriseDB Hybrid Manager - LTS is a hybrid cloud management software from EnterpriseDB, Inc. A security vulnerability exists in EnterpriseDB Hybrid Manager - LTS that originates from unauthorized access to a gRPC endpoint and could result in a data disclosure or denial of service...

GHSA-4JMP-X7MH-RGMR Finality Provider vulnerable to anti-slashing bypassing due to misconfiguration

Summary The anti-slashing is not effective if the attacker can access EOTS manager endpoints. Impact If the EOTS manager endpoints are open to public without HMAC protection, the attacker can manually cause slashing of the finality provider through the RPC endpoints. Report credits go to:...

CVE-2025-67780

SpaceX Starlink Dish devices running firmware 2024.12.04.mr46620 are affected by CVE-2025-67780 due to unauthenticated LAN gRPC requests. The issue allows administrative actions via the diagnostic interface, and the cross-origin policy can be bypassed by omitting a Referer header, potentially ena...

SpaceX Starlink Dish 安全漏洞

SpaceX Starlink Dish is a user terminal receiver from SpaceX in the United States. A security vulnerability exists in SpaceX Starlink Dish version 2024.12.04.mr46620, which stems from an unauthenticated LAN gRPC request that could result in administrative operations...

📄 Arista NGFW 17.3.1 Information Disclosure Scanner

This is a proof of concept testing script for an information disclosure vulnerability in Arista NGFW version 17.3.1. ============================================================================================================================================= | Title : Arista NGFW 17.3.1 Informati...

rxrpc: Make it so that a waiting process can be aborted

...

Missing Release of Resource after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime via resource exhaustion caused by improper cleanup of long-lived resources. Several components fail to correctly close or release gRPC connections, SPIFFE sources, and streaming...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure through error messages returned by the JSON-RPC API. An attacker can access sensitive trace-back information, including information about the internal network configuration and server setup, by sending malformed...

The vulnerability of Autobahn’s library for implementing asynchronous web sockets and RPC interactions stems from insufficient validation and filtering of input data used to construct HTTP headers. This allows attackers to inject arbitrary headers into HTTP responses.

The vulnerability of the library for implementing asynchronous web sockets and RPC interactions in Autobahn is related to insufficient validation and filtering of input data used to construct HTTP headers. Exploiting this vulnerability allows a malicious actor to inject arbitrary headers into HTT...

kernel: NFSD: Protect against send buffer overflow in NFSv2 READ

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...

kernel: rxrpc: Fix missing locking causing hanging calls

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted e.g. because kafs saw a signal between it being queued for connection and the I/O thread picking up the call, the abort will be prioritised over the connecti...

CVE-2025-63783

A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...

PT-2025-45466

Name of the Vulnerable Software and Affected Versions Onlook web application version 0.2.32 Description A Broken Object Level Authorization BOLA issue exists in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application. The API does not properly validate if the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990085 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f wil...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Bug fixed due to preallocation collision When the user space uses AFRXRPC to provide a server, it must pre-allocate incoming calls and assign them call IDs that will be used for recvmsg and sendmsg calls related to those...

ksmbd: fix recursive locking in RPC handle list access

...

EUVD-2025-36988

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

CVE-2025-40090

Summary (CVE-2025-40090): A race condition in ksmbd RPC handling on Linux kernels caused deadlocks when opening named pipes. The root cause is ksmbd_session_rpc_method attempting to take the same sess->rpc_lock that is already held by ksmbd_session_rpc_open (down_write) while ksmbd_session_rpc...

CVE-2025-40090

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...