Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989041 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmelnandcontrollerinit The reference counting issue...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989580)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989580 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: memcontrol: slab: fix obtain a reference to a freeing memcg Patch series Use objcgroup APIs t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990130)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990130 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: cancel all works upon hciunregisterdev syzbot is reporting that calling...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989607 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic/realview: Fix refcount leak in realviewgicofinit offindmatchingnodeandmatch returns a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989451 advisory. In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a stat...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989613 advisory. In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsgctrldev and cdev struct rpmsgctrldev contains a...

Samba WINS hook RCE (CVE-2025-10230)

In the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller's...

CVE-2025-62721 LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tags

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class fail to implement proper authorization checks, allowing any authenticated user to access all links, lists, and tags from all users in the system,...

CVE-2025-62720

CVE-2025-62720 affects the LinkAce self-hosted archive. The vulnerability lies in the ExportController HTML/CSV export paths, which retrieve all links without applying ownership or visibility filtering, enabling any authenticated user to exfiltrate private links from all users. Affected versions ...

CVE-2025-12623

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this issue is some unknown functionality of the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java of the component Authentication Toke...

CVE-2025-47370

Technical details, affected product/versions, root cause, and fixes for CVE-2025-47370 are not publicly provided in the supplied documents. Monitor for updates from vendors/security bulletins.

CVE-2025-47370 Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

PT-2025-44933

Name of the Vulnerable Software and Affected Versions Bluetooth affected versions not specified Description A temporary denial-of-service condition can occur when a remote device sends an invalid connection request during a Bluetooth Low Energy LE connectable scan. This issue is related to an...

PT-2025-44971

Name of the Vulnerable Software and Affected Versions Linksys Wireless Network Controller Driver affected versions not specified Description The wlan AP driver contains a potential out-of-bounds write issue stemming from an incorrect bounds check. Successful exploitation could allow a malicious...

PT-2025-49093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur in the cros ec keyb process function when receiving an EC MKBP EVENT KEY MATRIX event. This happens if cros ec...

LinkAce Access Control Vulnerability

LinkAce is a self-hosted archive of links to your favorite websites by Kevin Woblick Individual Developer. An Access Control Error vulnerability exists in LinkAce 2.3.1 and prior versions, which stems from the HTML and CSV export functionality in the ExportController class not applying ownership ...

CVE-2025-12623 fushengqian fuint Authentication Token ClientSignController.java authorization

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this issue is some unknown functionality of the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java of the component Authentication Toke...

EUVD-2025-37478

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this issue is some unknown functionality of the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java of the component Authentication Toke...

Fuint security vulnerabilities

fuint is an all-in-one system for store cashier, online loyalty center, and marketing by zach personal developer. A security vulnerability exists in fuint, which originates from a flaw in the authentication token processing component in file...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: dockerize, kube-metrics-adapter, kubecolor, kubeflow, lazydocker, git-credential-oauth, xcaddy, dive, go-licenses, restic, terraform-provider-azuread, kube-logging-operator-custom-runner, podinfo, dynamic-localpv-provisioner, secrets-store-csi-driver-provider-aws,...