PT-2025-40077

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1-00001-gabb4b3daf18c-dirty Description The Linux kernel contained a flaw where memory-only nodes nodes without CPUs were not properly initialized. This resulted in a kernel panic during boot when the...

Debian: Security Advisory (DLA-4320-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4320 : u-boot - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4320 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4320-1 [email protected]...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a lack of error handling and could lead to an early boot crash...

Oracle Linux 10 : kernel (ELSA-2025-16904)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-16904 advisory. 6.12.0-55.37.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug:...

[SECURITY] [DLA 4320-1] u-boot security update

Debian LTS Advisory DLA-4320-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 01, 2025 https://wiki.debian.org/LTS Package : u-boot Version : 2021.01+dfsg-5+deb11u2 CVE ID : CVE-2021-27097 CVE-2021-27138 Debian Bug : 983269 983270 Multiple vulnerabilties...

This Week in Spring: September 30th, 2025

Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...

NewStart CGSL MAIN 6.06 : grub2 Multiple Vulnerabilities (NS-SA-2025-0221)

The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by multiple vulnerabilities: - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (=1.0.0), cc.ddrpa.dorian:forvariz-spring-boot-starter (>=1.0.0 <=1.1.0) +997 more potentially affected by CVE-2025-59952 via io.minio:minio (>=0.2.3 <=8.5.9)

io.minio:minio MAVEN version =0.2.3, =1.0.0, =1.0, =1.0.1, =1.3.1, =1.0.1, =1.3.0.RELEASE, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =11.0.1-RELEASE, =12.0.1-RELEASE and more Source cves: CVE-2025-59952 Source advisory: OSV:GHSA-H7RH-XFPJ-HPCM...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (=1.0.0), cc.ddrpa.dorian:forvariz-spring-boot-starter (>=1.0.0 <=1.1.0) +827 more potentially affected by CVE-2025-59952 via io.minio:minio (>=7.0.1 <=8.5.9)

io.minio:minio MAVEN version =7.0.1, =1.0.0, =1.0, =1.0.1, =1.3.0.RELEASE, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =11.0.1-RELEASE, =11.0.1-RELEASE, =12.0.1-RELEASE - cn.bootx.platform:bootx-demo =1.2.3 and more Source cves: CVE-2025-59952 Source advisory: SNYK:JAVA-IOMINIO-13147656...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 PoC Objective Reproduce, explo...

kernel security update

4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

September 29, 2025—KB5065789 (OS Builds 26200.6725 and 26100.6725) Preview

None None...

x86/efistub: Call mixed mode boot services on the firmware's stack

...

CicadasCMS 代码注入漏洞

CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developers in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter categoryName in the file...

CVE-2025-10979 JeecgBoot exportXls improper authorization

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be...

CVE-2025-59408

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections...

CVE-2025-59404

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot AVB and allows direct modification of partitions...

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

CVE-2025-20313

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...