CVE-2025-6785 Tesla Model 3 Physical CAN Bus Injection

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9...

CVE-2025-6785 Tesla Model 3 Physical CAN Bus Injection

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9...

CVE-2025-6785

CVE-2025-6785 affects Tesla Model 3 software versions from 2023.Xx before 2023.44. The vulnerability stems from insecure handling of externally accessible CAN wiring, which can grant physical access to the CAN bus and enable injection of specially formed CAN messages to control remote start funct...

usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume

...

CVE-2025-9937

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited...

CVE-2025-9936

A vulnerability was identified in fuyanglipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

pinctrl: qcom: msm: mark certain pins as invalid for interrupts

...

usb: xhci: Apply the link chain quirk on NEC isoc endpoints

...

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

...

can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

...

scsi: hisi_sas: Create all dump files during debugfs initialization

...

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

...

PT-2025-36069

Name of the Vulnerable Software and Affected Versions: AppOpsControllerImpl.java affected versions not specified Description: A race condition exists in multiple functions within AppOpsControllerImpl.java, potentially allowing audio recording without displaying the appropriate privacy indicator...

Weitong Mall 授权问题漏洞

Weitong Mall 微同商城 is a shopping mall system by fuyanglipengjun individual developer. An authorization issue vulnerability exists in Weitong Mall version 1.0.0, which originates from improper authorization of function AdController in file /ad/queryAll...

Tesla Model 3 安全漏洞

The Tesla Model 3 is an electric vehicle from Tesla, an American company. A security vulnerability exists in Tesla Model 3 versions prior to 2023.44 that stems from improper physical access control of the CAN bus, which could lead to the remote start function being controlled...

CVE-2025-9937 elunez eladmin LocalStorageController deleteFile improper authorization

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited...

CVE-2025-9937

A vulnerability CVE-2025-9937 affects elunez eladmin 1.1, specifically the deleteFile function in the LocalStorageController. The flaw enables improper authorization and is remotely exploitable; the exploit has been publicly released. Public sources in the connected documents indicate that, as of...

drm/amd/display: Wake DMCUB before executing GPINT commands

...

CVE-2025-9936 fuyang_lipengjun platform queryAll AdController improper authorization

A vulnerability was identified in fuyanglipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

CVE-2025-9936

CVE-2025-9936 affects fuyang_lipengjun platform 1.0.0, specifically the AdController function in /ad/queryAll. The root cause is improper authorization allowing remote exploitation. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a remotely executable issue with a publicly available ...