CVE-2025-21871 tee: optee: Fix supplicant wait loop

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorre...

PT-2025-28447 · Qualcomm · Snapdragon +34

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while processing event close when the client process terminates abruptly. Recommendations: At the moment, there is no information about a newer version that contains...

MikroTik RouterOs NULL Pointer Dereference (CVE-2021-36614)

Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference. This plugin only works with Tenable.ot. Please visit...

CVE-2023-26551

An out-of-bounds write flaw was found in the ntp package. A remote attacker can trigger this vulnerability by sending malicious data packets to the ntp server. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26553

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26554

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2021-36614

Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

Design/Logic Flaw

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service DoS by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted...

MikroTik RouterOS 6.x Reachable Assertion Failure / Null Pointer Dereference Vulnerabilities

MikroTik RouterOS version 6.x suffers from having multiple null pointer dereference vulnerabilities and a reachable assertion failure MikroTik RouterOS 6.x Reachable Assertion Failure / Null Pointer Dereference Details ======= Product: MikroTik's RouterOS Vendor URL: https://mikrotik.com/ Vendor...

Command Execution Vulnerability in Huaan Securities Options Bowl

Huaan Securities Options Bao is an individual stock options online trading Qianlong version of the client is a set of individual stock options quotes, strategies, trading in one of the professional terminal. Huaan Securities Options Treasure suffers from a command execution vulnerability, which c...

Command Execution Vulnerability in Omni-Directional PDF Converter

Full range of PDF Converter is a very powerful pdf conversion tool, support PDF documents into Word, Excel, PPT, pictures, text, HTML, Epub, XML. A full range of PDF Converter has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into the clie...

Command Execution Vulnerability in Xiaozhi Desktop

Smart Desktop is a desktop organizer that improves office efficiency. Xiaozhi Desktop suffers from a command execution vulnerability, which can be exploited by an attacker to inject an executable DLL file into a client process to perform arbitrary functions...

Command Execution Vulnerability in Yimin Trader Financial Platform Qiankun Edition

Founded in 2005, Yimin Co., Ltd. provides customers with three major businesses, namely, securities assisted decision-making software, investor education, and investment consulting, and is committed to improving the profitability of its users. Tencent is the second largest shareholder of the...

Command Execution Vulnerability in ZW CAD

Zhongwang Software is a leading CAD/CAM solution provider in China, and an industrial software enterprise in China that has mastered the core technology of 2D/3D CAD, CAM and CAE as well as the ability of product development at the same time. A command execution vulnerability exists in Zhongwang...

Command Execution Vulnerability in Emblem Win PC Version (Traditional Chinese)

Huawei Win PC Version is a stock financial terminal newly launched by Huaan Securities. There is a command execution vulnerability in Huawei PC Edition Traditional Chinese version, which can be exploited by attackers to inject executable DLL files into the client process and execute arbitrary...

Command Execution Vulnerability in Spin Master PDF Editor of Xiamen Printed Information Technology Co.

Turn Master PDF Editor is a processing PDF editor. Xiamen Printed Information Technology Co., Ltd Turn Master PDF Editor has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...

Command Execution Vulnerability in Spin Master OCR at Xiamen Printed Information Technology Co.

Turn Master OCR Software is an OCR text recognition software. Xiamen PrintMaster OCR has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...

Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...

DLL Hijacking Vulnerability in Quick Play Game Box of Shenzhen Yunqi Network Technology Co.

Quick Play Game Box is a game box software. Shenzhen Yunqi Network Technology Co., Ltd Quick Play Game Box has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

DLL Hijacking Vulnerability in Qi Fan Game Platform of Shanghai Qi Fan Digital Technology Co.

Qifan Game Platform is a gaming platform developed by Shanghai Qifan Digital Technology Co. Ltd. A DLL hijacking vulnerability exists in the Qi Fan Game Platform, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...