EUVD-2025-205108

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

UBUNTU-CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-68346

The CVE-2025-68346 vulnerability affects the Linux kernel ALSA: dice driver. The root cause is a missing validation of stream_count read from a FireWire device in detect_stream_formats(), which can allow out-of-bounds writes if stream_count exceeds MAX_STREAMS. The fix adds the same validation to...

CVE-2025-68346 ALSA: dice: fix buffer overflow in detect_stream_formats()

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

CVE-2025-46279

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed...

[SECURITY] Fedora 42 Update: abrt-2.17.8-1.fc42

abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...

MobileDetect 2.8.31 - Cross-Site Scripting (XSS)

Exploit Title: MobileDetect 2.8.31 - Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/serbanghita/Mobile-Detect/ Software Link: https://github.com/serbanghita/Mobile-Detect/ Version: 4da80e5 Tested on: Windows CVE : CVE-2018-25080 Proof Of...

PT-2025-48819

Name of the Vulnerable Software and Affected Versions AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 Description The software contains an authenticated command injection flaw in the NetFailDetectD binary. This allows attackers to execute arbitrary commands via a crafted input...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990573 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989317 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Added resctrlcpudetect to the bspinit helper. Since 923f3a2b48bd “x86/resctrl: Query LLC monitoring properties once during boot”, resctrlcpudetect has been moved from the common CPU initialization code to the...

EUVD-2025-35876

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWANwizard4...

MAL-2025-48833 Malicious code in detect-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in detect-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-11151: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before...

SUSE CVE-2023-53650

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcdmipid: Fix an error handling path in mipidspiprobe If 'mipiddetect' fails, we must free 'md' to avoid a memory leak...

CVE-2023-53650

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcdmipid: Fix an error handling path in mipidspiprobe If 'mipiddetect' fails, we must free 'md' to avoid a memory leak...

CVE-2023-53650 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcdmipid: Fix an error handling path in mipidspiprobe If 'mipiddetect' fails, we must free 'md' to avoid a memory leak...

CVE-2023-53650 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcdmipid: Fix an error handling path in mipidspiprobe If 'mipiddetect' fails, we must free 'md' to avoid a memory leak...