260 matches found
ROS-20251128-06
A vulnerability in the adevrelease function in the drivers/peci/cpu.c module of the Platform Environment Control driver Interface PECI module of the Linux kernel is related to the reuse of previously released memory. memory. Exploitation of the vulnerability could allow an attacker to impact the...
CVE-2025-59373
A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM. For more...
The vulnerability of the AsusSwitchAgent component of the ASUS System Control Interface (ASCI) driver allows a hacker to execute arbitrary code with system privileges.
The vulnerability of the AsusSwitchAgent component of the ASUS System Control Interface ASCI driver is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code with system privileges...
CVE-2025-59373
A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM. For more...
EUVD-2025-199530
A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM. For more...
CVE-2025-59373: Incorrect Permission Assignment for Critical Resource
A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM. For more...
GHSA-VGQ7-9R5R-J9V3 Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NpcfBDTPolicyControl API...
CVE-2025-60632
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NpcfBDTPolicyControl API...
PT-2025-47980
ASUS System Control Interface and Affected Versions ASUS System Control Interface affected versions not specified Description A local privilege escalation issue exists in the restore mechanism of the ASUS System Control Interface. An unprivileged actor can copy files without proper validation int...
CVE-2025-63560
An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component...
CVE-2025-61156
Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...
PT-2025-49053
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SCMI debug subsystem. If the subsystem fails to initialize, the debug root may be missing, leading to a NULL descriptor. This condition is not...
EUVD-2021-19371
Malware in sbrugna...
EUVD-2014-3452
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986974)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986974 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this t...
EUVD-2022-39148
Malicious code in bioql PyPI...
EUVD-2022-39149
Malicious code in bioql PyPI...
NVIDIA Triton Inference Server Operating System Command Injection Vulnerability
NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server suffers from an operating system command injection vulnerability that stems from the Python backend not...
The vulnerability of the control interface for NVIDIA BlueField microprogrammed software for data processing chips allows attackers to enhance their privileges.
The vulnerability of the control interface for NVIDIA BlueField microprogrammed data processing software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges by modifying configuration data...