The vulnerability of the rxrpc_wait_to_be_connected() function in the net/rxrpc/sendmsg.c module, which supports RxRPC session sockets in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcwaittobeconnected function in the net/rxrpc/sendmsg.c module, which supports RxRPC session sockets in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the igb_enable_sriov() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the igbenablesriov function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Linux kernel’s Ethernet network adapter driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the sof_es8336remove() function in the sound module of the sound/soc/intel/boards/sof_es8336.c file, which is part of the Linux operating system’s SoC kernel support for audio, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sofes8336remove function in the sound/soc/intel/boards/sofes8336.c file relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of AMD’s microprogrammed graphics processor software, related to errors in processing input data, allows attackers to compromise the integrity of protected information.

The vulnerability of AMD’s microprogrammed graphics software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of protected information...

The vulnerability of SMM communication buffers in AMD’s microprogrammed graphics processors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SMM communication buffers in AMD graphics processor microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the Git repository management system Gitea, related to access control errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git repository management system Gitea is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the /cgi-bin/DownloadFlash file of the Web Management Interface component of the Tenda AC21 microprogramming system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the /cgi-bin/DownloadFlash file of the Web Management Interface component of the Tenda AC21 microprogramming system for routers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access...

The vulnerability of the web-based communication platform Mitel OpenScape 4000 and its centralized network management platform, Mitel OpenScape 4000 Manager, is related to errors in privilege management. This vulnerability allows an attacker to elevate their privileges and execute arbitrary code.

The vulnerability of the Mitel OpenScape 4000 hybrid communication platform’s web service and the Mitel OpenScape 4000 Manager network management platform is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges and execute...

Vulnerability of the loop_global_unlock() function in the drivers/block/loop.c module – A driver for supporting block devices in the Linux kernel, which allows a hacker to trigger a service failure.

Vulnerability of the loopglobalunlock function in the drivers/block/loop.c module – The Linux kernel’s block device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2025-71241

SPIP before 4.3.6, 4.2.17, and 4.1.20 allows Cross-Site Scripting XSS in the private area. The content of the error message displayed by the 'transmettre' API is not properly sanitized, allowing an attacker to inject malicious scripts. This vulnerability is mitigated by the SPIP security screen...

CVE-2025-71241

SPIP

CVE-2025-71241 SPIP < 4.3.6 Cross-Site Scripting in Private Area

SPIP before 4.3.6, 4.2.17, and 4.1.20 allows Cross-Site Scripting XSS in the private area. The content of the error message displayed by the 'transmettre' API is not properly sanitized, allowing an attacker to inject malicious scripts. This vulnerability is mitigated by the SPIP security screen...

emp3r0r 安全漏洞

emp3r0r is a Linux framework tool developed by Jimmy Mi. Versions of emp3r0r prior to 3.21.2 contained security vulnerabilities. These vulnerabilities stemmed from inconsistent synchronization among multiple shared mappings when accessed by goroutines, which could lead to concurrent mapping...

The vulnerability of the Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a hacker to trigger a service failure.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Trust Domain Extensions (TDX) module in Intel microprogramming systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Trust Domain Extensions TDX module in Intel microprogramming devices is related to errors during initialization. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to replace the user interface.

The vulnerability of the Downloads component in the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface with a specially created HTML page...

The vulnerability of microprogrammed software in ABB devices, related to errors in verifying the cryptographic signature, allows a perpetrator to trigger a service failure.

The vulnerability of microprogramming software in ABB devices is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains

Summary NOTE: This only affects deployments that enable the optional MS Teams extension Teams channel. If you do not use MS Teams, you are not impacted. When OpenClaw downloads inbound MS Teams attachments / inline images, it may retry a URL with an Authorization: Bearer header after receiving 40...

CVE-2025-36348

IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1 may expose sensitive information to a remote privileged attack...