UBUNTU-CVE-2023-53274

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt8183: Add back SSPM related clocks This reverts commit 860690a93ef23b567f781c1b631623e27190f101. On the MT8183, the SSPM related clocks were removed claiming a lack of usage. This however causes some issues when...

PT-2025-40632

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4+ 1 Description The Linux kernel contained an issue in the crypto/ccp module where the sev platform shutdown locked function was called with a NULL argument, leading to a NULL pointer dereference during...

CVE-2025-39729 crypto: ccp - Fix dereferencing uninitialized error pointer

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/crypto/ccp/sev-dev.c:1312 sevplatforminitlocked error: we previously assumed 'error' could be null...

Malicious code in co-in-mas-ter-free-spins-2023-dflme (npm)

The package co-in-mas-ter-free-spins-2023-dflme was found to contain malicious code...

Malicious code in co-in-mas-ter-free-spins-rthrtg (npm)

The package co-in-mas-ter-free-spins-rthrtg was found to contain malicious code...

Malicious code in co-in-mas-ter-free-spins-trhgrfr (npm)

The package co-in-mas-ter-free-spins-trhgrfr was found to contain malicious code...

Malicious code in coin-master-free-spins-2023-co-ins-zkdkz (npm)

The package coin-master-free-spins-2023-co-ins-zkdkz was found to contain malicious code...

MAL-2025-43846 Malicious code in coin-master-free-spins-2023-co-ins-zkdkz (npm)

The package coin-master-free-spins-2023-co-ins-zkdkz was found to contain malicious code...

MAL-2025-46647 Malicious code in working-april-co-in-mas-ter-free-spins-rthrtg (npm)

The package working-april-co-in-mas-ter-free-spins-rthrtg was found to contain malicious code...

MAL-2025-43836 Malicious code in co-in-mas-ter-free-spins-2023-dflme (npm)

The package co-in-mas-ter-free-spins-2023-dflme was found to contain malicious code...

MAL-2025-43837 Malicious code in co-in-mas-ter-free-spins-rthrtg (npm)

The package co-in-mas-ter-free-spins-rthrtg was found to contain malicious code...

interconnect: qcom: sc8180x: Mark CO0 BCM keepalive

...

CVE-2025-53508: Improper Neutralization of Special Elements used in an OS Command

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under Product Status...

CVE-2025-53507: Insecure Storage of Sensitive Information

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under Product Status...

DOS & CO SS1 路径遍历漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. A path traversal vulnerability exists in DOS & CO SS1 version 16.0.0.10 and earlier, which stems from an improperly restricted pathname and could allow a remote, authenticated attacker to overwrite legitimate files...

DOS & CO SS1 安全漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. A security vulnerability exists in DOS & CO SS1 version 16.0.0.10 and earlier, which stems from improper assignment of critical resource permissions and could lead to the acquisition of root privileges...

DOS & CO SS1 加密问题漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. An encryption issue vulnerability exists in DOS & CO SS1 Ver.16.0.0.10 and earlier versions, which stems from insufficient encryption strength and could lead to unauthorized access...

DOS & CO SS1 代码问题漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. A code issue vulnerability exists in DOS & CO SS1 version 16.0.0.10 and prior versions, which stems from allowing the upload of arbitrary files and execution of system commands...

DOS & CO SS1 安全漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. A security vulnerability exists in DOS & CO SS1 Ver.16.0.0.10 and earlier versions, which stems from improper file or directory access control and could lead to remote unauthorized access...

CVE-2025-53705

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute...