PT-2025-43689

Name of the Vulnerable Software and Affected Versions Deck Mate 1 affected versions not specified Description Deck Mate 1 executes firmware directly from an external EEPROM without verifying its authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to execu...

Light & Wonder Deck Mate security vulnerabilities

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in Light & Wonder Deck Mate that stems from a lack of secure boot chain validation and runtime integrity validation, which could allow a physically accessible attacker to modify or...

Oracle WebCenter Sites (October 2025 CPU)

The 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain...

Exploit for Improper Neutralization of Internal Special Elements in Apache Camel

This is a PoC exploit for CVE-2025-27636, a vulnerability in Apa...

New Home for Spring Integration AWS

The Spring Integration for AWS was always an independent Spring Integration extension project with its own plans and release cycles. The consumption of this single jar library has always added a complexity from the dependency management perspective. It depends not only on Spring Integration modul...

EUVD-2022-54872

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987694 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: Fix waitfordeviceprobe & deferredprobetimeout interaction Mounting NFS rootfs was...

kernel security update

5.14.0-570.55.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

October 20, 2025—KB5070773 (OS Builds 26200.6901 and 26100.6901) Out-of-band

None None...

cn.ymotel:dactor (>=1.0.1, <=1.0.15), org.springframework.boot:spring-boot-starter-websocket (1.5.19.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.22.release)

org.springframework:spring-websocket MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.ymotel:dactor =1.0.1, =1.0.15 -...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.9.release, <=1.1.10.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.8.release)

org.springframework:spring-websocket MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.9.release,...

com.almis.awe:awe-boot (>=4.0.4, <=4.0.5), com.almis.awe:awe-controller (>=4.0.3, <=4.1.1) +20 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.14.release)

org.springframework:spring-websocket MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.almis.awe:awe-boot =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3,...

de.fhg.fokus.nubomedia:nubomedia-media-client (>=1.0, <=6.6.0), org.springframework.boot:spring-boot-starter-websocket (1.2.7.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.8.release)

org.springframework:spring-websocket MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - de.fhg.fokus.nubomedia:nubomedia-media-client =1.0, =4.1.7.release,...

org.springframework.boot:spring-boot-starter-websocket (1.5.17.release), org.springframework.integration:spring-integration-websocket (4.3.18.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.20.release)

org.springframework:spring-websocket MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.17.release -...

org.springframework.boot:spring-boot-starter-websocket (1.2.8.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.9.release)

org.springframework:spring-websocket MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.2.8.release Source cve...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4) +13 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.4.release)

org.springframework:spring-websocket MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.4 -...

org.spamjs:mangolite (0.0.0), org.springframework.boot:spring-boot-starter-websocket (>=1.1.6.release, <=1.1.8.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.7.release)

org.springframework:spring-websocket MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.spamjs:mangolite 0.0.0 -...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.11.release, <=1.1.12.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.9.release)

org.springframework:spring-websocket MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.11.release,...

org.springframework.boot:spring-boot-starter-websocket (1.3.8.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.8.release)

org.springframework:spring-websocket MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.3.8.release Source cve...

org.springframework.boot:spring-boot-starter-websocket (1.5.11.release), org.springframework.integration:spring-integration-websocket (4.3.15.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.15.release)

org.springframework:spring-websocket MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.11.release -...