PT-2025-36417

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions prior to 2.11 Description: A flaw has been found in Portabilis i-Educar that allows for improper access controls. This issue affects an unknown part of the file /enturmacao-em-lote/. The attack is possible to be...

CVE-2023-31365

An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area resulting in loss of integrity or availability...

CVE-2025-6785

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9...

CVE-2025-6785 Tesla Model 3 Physical CAN Bus Injection

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9...

CVE-2025-6785 Tesla Model 3 Physical CAN Bus Injection

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9...

CVE-2025-6785

CVE-2025-6785 affects Tesla Model 3 software versions from 2023.Xx before 2023.44. The vulnerability stems from insecure handling of externally accessible CAN wiring, which can grant physical access to the CAN bus and enable injection of specially formed CAN messages to control remote start funct...

perf/core: Prevent VMA split of buffer mappings

...

can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

...

Tesla Model 3 安全漏洞

The Tesla Model 3 is an electric vehicle from Tesla, an American company. A security vulnerability exists in Tesla Model 3 versions prior to 2023.44 that stems from improper physical access control of the CAN bus, which could lead to the remote start function being controlled...

mm: fix uprobe pte be overwritten when expanding vma

...

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.

...

CVE-2025-9802 RemoteClinic profile.php sql injection

A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely...

CVE-2025-9686

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of the component Listagem de áreas de conhecimento Page. Performing manipulation of the argument ID results in sql injection. The attack is...

CVE-2025-9767

Affected product: itsourcecode Sports Management System v1.0. The vulnerability is a SQL injection in the file /Admin/sporttype.php triggered by manipulating the code parameter. Root cause is lack of input validation/parameterized queries in that code path. Impact includes potential unauthorized ...

Linux Distros Unpatched Vulnerability : CVE-2025-38554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma-mm is freed after vma-vmrefcnt got dropped By inducing delays in the...

Linux Distros Unpatched Vulnerability : CVE-2025-38510

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kasan: remove kasanfindvmarea to prevent possible deadlock findvmarea couldn't be called in...

CVE-2025-44178

DASAN GPON ONU H660WM H660WMR210825 is susceptible to improper access control under its default settings. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information and modify its configuration via the UPnP protocol WAN sides without any authentication...

CVE-2025-9686

CVE-2025-9686 affects Portabilis i-Educar up to version 2.10. A SQL injection vulnerability exists in the /module/AreaConheimento/edit page triggered by manipulating the ID parameter, enabling remote exploitation. The exploit has been publicly released. Connected documents do not specify a fixed ...

CVE-2025-9686 Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of the component Listagem de áreas de conhecimento Page. Performing manipulation of the argument ID results in sql injection. The attack is...

CVE-2025-9686 Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of the component Listagem de áreas de conhecimento Page. Performing manipulation of the argument ID results in sql injection. The attack is...