CVE-2024-57233

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection due to insufficient validation of XML input in crafted URL paths. An attacker can read files from the server's filesystem or perform denial-of-service attacks by supplying malicious XML content. Note:...

PT-2025-19730

Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.22 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the procFileAdminEditImage method in the /file/file.admin.controller.php file. Recommendations For Rhym...

PT-2025-19722 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif disable function. Recommendations: For version 1.0.2.26, consider disabling the vif...

PT-2025-19810 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 versions up to 15.03.06.23 Description: A critical issue affects the setSchedWifi function of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

PT-2025-19809 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 versions up to 15.03.06.23 Description: A critical vulnerability was found in Tenda AC1206, affecting the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated...

NETGEAR RAX5 安全漏洞

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the iface parameter in the vifdisable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

SUSE CVE-2023-53054

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...

CVE-2023-53054

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...

CVE-2023-53054

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...

DEBIAN-CVE-2023-53054

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...

UBUNTU-CVE-2023-53054

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...

CVE-2023-53102

Summary of CVE-2023-53102 (Linux kernel ice driver, AF_XDP/XSK): The issue arises in ice_qp_dis() when stopping a queue pair used by xsk pool attach/detach. TXQ interrupts were not reliably disabled before the hardware flush, allowing NAPI to run and freeing xdp_buff pointers prematurely, which c...

CVE-2023-53054

CVE-2023-53054 affects the Linux kernel’s USB DWC2 driver (dwc2) where suspend/resume could leak device resources: __dwc2_lowlevel_hw_enable calls devm_add_action_or_reset() on every PM cycle, creating new devres entries; there is also a second issue where regulator_bulk_disable() is never invoke...

SUSE CVE-2025-23144

In the Linux kernel, the following vulnerability has been resolved: backlight: ledbl: Hold ledaccess lock when calling ledsysfsdisable Lockdep detects the following issue on led-backlight removal: 142.315935 ------------ cut here ------------ 142.315954 WARNING: CPU: 2 PID: 292 at...

SUSE CVE-2025-37784

In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP driver tracks perout and pps enable state with flags. Currently when disabling pps and perout signals during icssiepexit, results in NULL...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ice driver not disabling the txq interrupt before refreshing the hardware, which could lead to null...

PT-2025-18790 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.06.42 multi Description: A command injection issue was found in the formsetUsbUnload function via the deviceName parameter, allowing attackers to execute arbitrary commands through a crafted request. Recommendations: F...

DEBIAN-CVE-2022-49931

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in scdisable Commit 13bac861952a "IB/hfi1: Fix abba locking issue with scdisable" incorrectly tries to move a list from one list head to another. The result is a kernel crash. The crash is triggered...

DEBIAN-CVE-2022-49859

In the Linux kernel, the following vulnerability has been resolved: net: lapbether: fix issue of invalid opcode in lapbethopen If lapbregister failed when lapb device goes to up for the first time, the NAPI is not disabled. As a result, the invalid opcode issue is reported when the lapb device go...