2863 matches found
CVE-2025-60682
The connected CNVD/Red Hat/EUVD/NVD entries confirm CVE-2025-60682 affecting TOTOLINK A720R router firmware V4.1.5cu.614_B20230630, in the cloudupdate_check binary (sub_402414) where cloud update parameters are processed. User-controlled magicid and url are concatenated into shell commands and ex...
CVE-2025-60687
Totolink LR1200GB Router firmware V9.1.0u.6619_B20230130 is affected by an unauthenticated command-injection in the cstecgi.cgi binary (sub_41EC68). The binary reads the imei parameter, only checks length (15 chars), then inserts it into a system command via sprintf() and executes it with system(...
CVE-2025-60671
A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823GV1.0.2B0520181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linuxvlanreinit file. The vulnerability occurs because content read from this file is only partially validated for a...
CVE-2025-60687
An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619B20230130 within the cstecgi.cgi binary sub41EC68 function. The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is the...
CVE-2025-9408
System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...
CVE-2025-9408
System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...
CVE-2025-9408 Userspace privilege escalation vulnerability on Cortex M
System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...
CVE-2025-9408 Userspace privilege escalation vulnerability on Cortex M
System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...
EUVD-2025-84338
System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...
CVE-2025-9408
CVE-2025-9408 describes a race condition in the system call entry path on Cortex-M ( Zephyr RTOS context in the provided docs ) that enables privilege escalation by malicious userspace processes. The available connected documents confirm the issue and its impact but do not specify concrete exploi...
CVE-2025-9408 Userspace privilege escalation vulnerability on Cortex M
System call entry on Cortex M and possibly R and A, but I think not has a race which allows very practical privilege escalation for malicious userspace processes...
kernel: acct: perform last write from workqueue
In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...
kernel: acct: perform last write from workqueue
In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a contention condition in the entry point of a system call, which could lead to elevation of privilege by a malicious userspace process...
PT-2025-46349
Name of the Vulnerable Software and Affected Versions versions prior to 2025-9408 Description A race condition exists during system call entry on Cortex M processors, potentially allowing privilege escalation for malicious user space processes. It is possible this issue may also affect Cortex R a...
CVE-2025-12489
evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...
EUVD-2022-54709
In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...
CVE-2025-55080
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...