CVE-2025-40757

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices connected to the network allow unrestricted access to sensitive files, such as databases. This could allow an attacker to...

PT-2025-36680

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series BACnet affected versions not specified APOGEE PXC Series P2 Ethernet affected versions not specified TALON TC Series BACnet affected versions not specified Description: A vulnerability exists that allows unrestricted access ...

Rockwell Automation多款产品 安全漏洞

Rockwell Automation 1756-EN4 and others are products of Rockwell Automation, Inc.Rockwell Automation 1756-EN4 is a controller.Rockwell Automation 1756-ENT2R is an Ethernet communication The Rockwell Automation 1756-ENT4R is an Ethernet communication module. A security vulnerability exists in...

Linux Distros Unpatched Vulnerability : CVE-2025-39703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash kernel BUG:...

SUSE-SU-2025:20653-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2025-38006: net: mctp: Do not access ifaindex when missing bsc1244930. -...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that gve may perform ethtool operations after shutdown...

net: dsa: b53: do not enable EEE on bcm63xx

...

net: phy: Don't register LEDs for genphy

...

net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register

...

net: bridge: xmit: make sure we have at least eth header len bytes

...

eth: bnxt: always recalculate features after XDP clearing, fix null-deref

...

eth: bnxt: fix truesize for mb-xdp-pass case

...

CVE-2025-56752

A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...

The vulnerability of RUGGEDCOM ROS Ethernet switch microprogramming software, related to insufficient handling of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 2)

Program Vulnerabilities and Manual Assessment This is the second in a three-part series on building and using a testing bench for Industrial Control Systems ICS. In this series, we will build a physical test bench, review program logic to find flaws, perform manual exploitation of commonly used I...

kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix use-after-free issue in ethskbpkttype KMSAN reported a use-after-free issue in ethskbpkttype1. The cause of the issue was that ethskbpkttype accessed skb's data that didn't contain an Ethernet header. This occur...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: hfsc: Fix a potential UAF in hfscdequeue too CVE-2025-37823 kernel: i40e: fix MMIO write access to an invalid page in i40eclearhw CVE-2025-38200 kernel: RDMA/iwcm: Fix...

Vulnerability of the mvneta_ethtool_get_strings() function in the drivers/net/ethernet/marvell/mvneta.c module – This driver provides support for Ethernet network adapters from Marvell’s Linux kernel, which can be exploited by attackers to cause service failures.

Vulnerability of the mvnetaethtoolgetstrings function in the drivers/net/ethernet/marvell/mvneta.c module – The drivers for Marvell Ethernet network adapters in Linux operating systems are vulnerable due to a reliance on the NULL pointer dereferencing mechanism. Exploiting this vulnerability coul...

The vulnerability of the QuickSetting() function (ap.so) in the TOTOLINK CA300-PoE router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the QuickSetting function ap.so in the TOTOLINK CA300-PoE router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the hour/minute parameter. Exploiting this vulnerability could allow a remote attacker to...

Linux Distros Unpatched Vulnerability : CVE-2022-3190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or...