12860 matches found
PT-2025-33605 · Tenda · Tenda Ac20
Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A stack-based buffer overflow vulnerability exists in the save virtualser data function of the /goform/formSetVirtualSer file. The vulnerability is triggered by manipulating the argument list,...
PT-2025-33552
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the mac80211 component where it does not reject Very High Throughput VHT operating mode notifications for unsupported channel widths...
SUSE SLED15: grub2 / grub2-arm64-efi / grub2-i386-pc / grub2-powerpc-ieee1275 / etc (SUSE-SU-2025:02813-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02813-1 advisory. - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Other...
CVE-2025-8971
creationtimestamp| type| source ---|---|--- 2025-08-15 21:00:04+00:00| published-proof-of-concept| Telegram/v0lJTL3KepCUnsg-7LQlBaYUlXYZC314z2lTxUwZsVVrVrw 2025-08-17 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwmrsbcbxp2n...
Huawei EnzoH OS Command Injection Vulnerability (CNVD-2025-23594)
Huawei EnzoH is a wireless access device from Huawei China. Huawei EnzoH suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary command execution...
Activate Me!: Designing Efficient Activation Functions for Privacy-Preserving Machine Learning with Fully Homomorphic Encryption
The growing adoption of machine learning in sensitive areas such as healthcare and defense introduces significant privacy and security challenges. These domains demand robust data protection, as models depend on large volumes of sensitive information for both training and inference. Fully...
SUSE SLES15 Security Update : kubernetes1.23 (SUSE-SU-2025:01940-2)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01940-2 advisory. - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Tenable has extracted the...
PT-2025-33475 · Tenda · Tenda Ac20
Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A stack-based buffer overflow issue was identified in the sub 46A2AC function of the /goform/setMacFilterCfg file. The manipulation of the deviceList argument leads to this overflow, and the attack...
CVE-2025-54228
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54220
InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54219
InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Malicious code in 21st-angular (npm)
The package 21st-angular was found to contain malicious code...
MAL-2025-29774 Malicious code in project-25v7a-uniform (npm)
The package project-25v7a-uniform was found to contain malicious code...
Malicious code in project-24kl1-romeo (npm)
The package project-24kl1-romeo was found to contain malicious code...
MAL-2025-6994 Malicious code in 21st-angular (npm)
The package 21st-angular was found to contain malicious code...
CVE-2025-8715 PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server
Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks...
CVE-2025-54696
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through = 3.5.26...
CVE-2025-30033
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-22...