CVE-2025-38732 netfilter: nf_reject: don't leak dst refcount for loopback packets

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfreject: don't leak dst refcount for loopback packets recent patches to add a WARN when replacing skb dst entry found an old bug: WARNING: include/linux/skbuff.h:1165 skbdstcheckunset include/linux/skbuff.h:1164 inlin...

CVE-2025-38732

CVE-2025-38732 refers to a Linux kernel vulnerability in netfilter nf_reject where loopback packets could cause a dst refcount leak. The issue arises from a patch that added a WARN during skb dst entry replacement but forgot that loopback packets already have a dst_entry attached (even at PRE_ROU...

Malicious code in building-attached-food (npm)

The package building-attached-food was found to contain malicious code...

MAL-2025-43674 Malicious code in building-attached-food (npm)

The package building-attached-food was found to contain malicious code...

bpf: Prevent tail call between progs attached to different hooks

...

QNAP QTS and QuTS hero null pointer dereference vulnerability (CNVD-2025-27747)

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QuTS hero out-of-bounds write vulnerabilities

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS和QNAP QuTS hero 路径遍历漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS和QNAP QuTS hero 路径遍历漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

PT-2025-42774

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the cadence-quadspi driver related to handling unbind operations during busy periods. The driver previously assumed no force device removal unbind...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from an unvalidated upload type, which may result in the upload of a non-attached file type. The following versions are affected: 10.8.3 and...

CVE-2025-8907

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather hig...

CVE-2025-8907

The CVE-2025-8907 entry concerns H3C M2 NAS V100R006, where the Webserver Configuration component is implicated. The vulnerability is described as allowing execution with unnecessary privileges via local manipulation, with attack complexity rated high and requiring local access. Vendor notes indi...

H3C M2 NAS 安全漏洞

H3C M2 NAS is a home private cloud disk from China's Xinhua San H3C. A security vulnerability exists in H3C M2 NAS version V100R006, which originates in the Webserver Configuration component that could lead to unwanted privilege execution...

TRENDnet TN-200 安全漏洞

TRENDnet TN-200 is a NAS media server from Trendnet, Inc. A security vulnerability exists in TRENDnet TN-200 version 1.02b02, which stems from the use of a hard-coded key in the parameter secdownload.secret...

Linux Distros Unpatched Vulnerability : CVE-2024-26873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Fix a deadlock issue related to automatic dump If we issue a disabling PHY...

ipTIME NAS 安全漏洞

ipTIME NAS is a wireless router product from the Korean company ipTIME that provides NAS network attached storage. A security vulnerability exists in ipTIME NAS version v1.5.04, which stems from improper use of the strcpy function in the upload.cgi module, which could lead to a pre-authentication...

CVE-2025-22481

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

CVE-2023-46073

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

CVE-2021-38306

Network Attached Storage on LG N1T1 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter...