10241 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986326)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986326 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4renamedirprepare We got issue as follows: EXT4-fs loop0: mounted...
The vulnerability of the sub_412E7C() function in the /goform/set_switch_settings file of the D-Link DIR-823X router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the sub412E7C function in the /goform/setswitchsettings function of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary...
The vulnerability of the uci_set function in D-link DIR-823X router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the uciset function in D-link DIR-823X router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the /goform/set_device_name function in D-Link DIR-823X router microprogramming software allows a attacker to execute arbitrary commands.
The vulnerability of the /goform/setdevicename function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning measures at the control level when processing the mac parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...
The vulnerability of the /goform/diag_traceroute file in D-Link DIR-823X router microprogramming software allows a attacker to execute arbitrary commands.
The vulnerability of the /goform/diagtraceroute function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning at the control level when processing the targetaddr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...
The vulnerability of the uci_del() function in the /goform/delete_prohibiting subroutine of D-Link DIR-823X router’s microprogramming software allows a intruder to execute arbitrary commands.
The vulnerability of the ucidel function in the /goform/deleteprohibiting function of the D-Link DIR-823X router’s microprogramming software is related to the failure to take appropriate data cleaning measures at the control level when processing the delvalue parameter. Exploitation of this...
The vulnerability of the fileaccess.cgi component of the D-Link DIR-868L router’s microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the fileaccess.cgi component of the D-Link DIR-868L router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the preapiarg parameter. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability in the web interface of the script /htdocs/cgibin/hedwig.cgi, a microprogramming system for D-Link DIR-852 routers, allows a attacker to execute arbitrary commands.
The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...
The vulnerability of the sub_412E7C() function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the sub412E7C function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...
CVE-2023-53594 driver core: fix resource leak in device_add()
In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...
CVE-2023-53594 driver core: fix resource leak in device_add()
In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...
CVE-2023-53594
CVE-2023-53594 is a Linux kernel driver-core resource leak in device_add(): if kobject_add() fails, dev->kobj.parent is set to NULL, causing a leak in resource cleanup and potentially insmod failure for mac80211_hwsim. The initial description and EulerOS/SUSE advisories confirm the vulnerabili...
EUVD-2025-22707
Malicious code in bioql PyPI...
EUVD-2025-22754
Malicious code in bioql PyPI...
EUVD-2025-22822
Malicious code in bioql PyPI...
EUVD-2022-39781
Malicious code in bioql PyPI...
EUVD-2025-28712
Malicious code in bioql PyPI...
EUVD-2025-28730
Malicious code in bioql PyPI...