OPENSUSE-SU-2025:20143-1 Security update for git-bug

This update for git-bug fixes the following issues: Changes in git-bug: - Revendor to include fixed version of depending libraries: - GO-2025-4116 CVE-2025-47913, bsc1253506 upgrade golang.org/x/crypto to v0.43.0 - GO-2025-3900 GHSA-2464-8j7c-4cjm upgrade github.com/go-viper/mapstructure/v2 to...

kernel: net: sched: sfb: fix null pointer access issue when sfb_init() fails

A null pointer dereference exists in the linux kernel, such that when sfbinit fails qdisc is NULL, and it will cause gpf issue, leading to damage to the availability of the system...

CVE-2025-29864

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29...

PT-2026-37478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel involving the gpio reset device. This special device is created dynamically and intended to remain in memory indefinitely. Due to the...

Android Information Disclosure

The vulnerability of Android operating systems is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

Linux Distros Unpatched Vulnerability : CVE-2025-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix a race in mptcppmdeladdtimer mptcppmdeladdtimer can call skstoptimersyncsk, &entry-addtimer while another might have free entry already, as reported ...

Oracle Linux 8 : edk2 (ELSA-2025-20669)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20669 advisory. - EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause Protection Mechanism Failure by local access Orabug: 38381983 CVE-2025-3770 ...

CVE-2025-63363: Improper Access Control

A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadca...

CVE-2025-63363

A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadca...

CVE-2025-63363

The Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway is vulnerable to de-authentication attacks due to a lack of Management Frame Protection . Specifically, affected Firmware V3.1.1.0 , HW 4.3.2.1 , and Webpage V7.04T.07.002880.0301 allow attackers to broadcast crafted deauthe...

PT-2025-49110

Name of the Vulnerable Software and Affected Versions Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware versions 3.1.1.0 Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway HW versions 4.3.2.1 Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi...

CVE-2025-63363

A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadca...

Waveshare RS232/485 to WIFI ETH (B) security vulnerability

Waveshare RS232/485 TO WIFI ETH B is a serial server from Waveshare China. A security vulnerability exists in Waveshare RS232/485 TO WIFI ETH B V3.1.1.0, which stems from a lack of management frame protection and could lead to a de-authentication attack...

PT-2025-55200

Уязвимость многофункционального онлайн редактора изображений для UI/UX дизайна PIXSO связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный JavaScript-код...

📄 Microsoft Windows 11 Administrator Protection Bypass / Privilege Escalation

Microsoft Windows 11 suffers from an administrator protection bypass local privilege escalation vulnerability. Proof of concept Metasploit module included. =============================================================================================================================================...

CVE-2025-40237: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...

Android Information Disclosure

The vulnerability of Android operating systems is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

Framework Android Disclosure

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

Framework Android Disclosure

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

Framework Android Disclosure

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...