can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

...

scsi: hisi_sas: Create all dump files during debugfs initialization

...

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

...

PT-2025-36069

Name of the Vulnerable Software and Affected Versions: AppOpsControllerImpl.java affected versions not specified Description: A race condition exists in multiple functions within AppOpsControllerImpl.java, potentially allowing audio recording without displaying the appropriate privacy indicator...

Weitong Mall Authorization Issue Vulnerability

Weitong Mall 微同商城 is a shopping mall system by fuyanglipengjun individual developer. An authorization issue vulnerability exists in Weitong Mall version 1.0.0, which originates from improper authorization of function AdController in file /ad/queryAll...

Tesla Model 3 security vulnerabilities

The Tesla Model 3 is an electric vehicle from Tesla, an American company. A security vulnerability exists in Tesla Model 3 versions prior to 2023.44 that stems from improper physical access control of the CAN bus, which could lead to the remote start function being controlled...

CVE-2025-9937 elunez eladmin LocalStorageController deleteFile improper authorization

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited...

CVE-2025-9937

A vulnerability CVE-2025-9937 affects elunez eladmin 1.1, specifically the deleteFile function in the LocalStorageController. The flaw enables improper authorization and is remotely exploitable; the exploit has been publicly released. Public sources in the connected documents indicate that, as of...

CVE-2025-9936 fuyang_lipengjun platform queryAll AdController improper authorization

A vulnerability was identified in fuyanglipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

CVE-2025-9936

CVE-2025-9936 affects fuyang_lipengjun platform 1.0.0, specifically the AdController function in /ad/queryAll. The root cause is improper authorization allowing remote exploitation. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a remotely executable issue with a publicly available ...

drm/amd/display: Increase array size of dummy_boolean

...

net/ncsi: Disable the ncsi work before freeing the associated structure

...

net: fec: remove .ndo_poll_controller to avoid deadlocks

...

CVE-2025-9795

A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the file src/main/java/com/jeff/tianti/controller/UploadController.java. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack...

USN-7737-1 linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; -...

USN-7737-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; -...

Exploit for Integer Overflow or Wraparound in Tesla Model_3_Firmware

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style...

CVE-2025-58458

In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...

CVE-2025-58458

In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...

CVE-2025-58458

In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...