CVE-2023-53693 USB: gadget: Fix the memory leak in raw_gadget driver

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in rawgadget driver Currently, increasing rawdev-count happens before invoke the rawqueueevent, if the rawqueueevent return error, invoke rawrelease will not trigger the devfree to be called...

CVE-2022-50562 tpm: acpi: Call acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpiputtable to fix memory leak The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpigettable to get the ACPI information, but the acpigettable should be coupled with...

CVE-2022-50561 iio: fix memory leak in iio_device_register_eventset()

In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iiodeviceregistereventset When iiodeviceregistersysfsgroup returns failed, iiodeviceregistereventset needs to free attrs array. Otherwise, kmemleak would scan & report memory leak as below: unreferenced...

CVE-2025-10611

creationtimestamp| type| source ---|---|--- 2025-10-22 08:50:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3rhotwacj2o 2025-10-28 07:28:27+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m4afurktde2g 2025-10-28 07:39:33+00:00| seen|...

CVE-2025-10047

creationtimestamp| type| source ---|---|--- 2025-10-22 08:43:27+00:00| seen| Telegram/FFtZEHaJii0mDOFQU4Ym-Bjt-tRCF36hzqTFs6qYYhcEycQ...

PT-2025-43134

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.10 through 18.3.4 GitLab CE/EE versions 18.4 through 18.4.2 GitLab CE/EE versions 18.5 through 18.5.0 Description An issue in GitLab CE/EE could allow an unauthenticated attacker to cause a denial of service condition ...

WordPress plugin Event Tickets 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

OpenWrt 安全漏洞

OpenWrt is the OpenWrt open source set of Linux operating systems for embedded devices. A security vulnerability exists in versions prior to OpenWrt 24.10.4 that stems from a heap buffer overflow in the event registration parsing code, which could lead to the execution of arbitrary code and bypas...

PT-2025-43094

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's USB gadget driver contains a memory leak in the raw gadget driver. Specifically, the raw dev-count is incremented before the raw queue event function is invoked. If ra...

WordPress plugin Event post 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Gitlab -- vulnerabilities

Gitlab reports: Improper access control issue in runner API impacts GitLab EE Denial of service issue in event collection impacts GitLab CE/EE Denial of service issue in JSON validation impacts GitLab CE/EE Denial of service issue in upload impacts GitLab CE/EE Incorrect Authorization issue in...

CVE-2021-36754

creationtimestamp| type| source ---|---|--- 2025-10-21 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4b7clu2q 2026-01-11 21:02:57+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mc6gemk5ks2b...

CVE-2025-35061

creationtimestamp| type| source ---|---|--- 2025-10-21 17:42:28+00:00| seen| Telegram/g0KAe83ql6DnRZXj6JIBKaWCGlBoamcRYMvHL3NrUk31x8...

CVE-2025-55083

creationtimestamp| type| source ---|---|--- 2025-10-21 17:42:18+00:00| seen| Telegram/7O2WMW0cDtYqRzmStaCfKldQmqLMpwzHF84GlFz-YLHCI...

CVE-2025-12031

creationtimestamp| type| source ---|---|--- 2025-10-21 17:42:11+00:00| seen| Telegram/HZRbfh6jT8ivaDwsimhW1YHLICjtgz2zMyIiRWvdppLQYjY...

EUVD-2022-54710

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

CVE-2025-62684

creationtimestamp| type| source ---|---|--- 2025-10-21 05:02:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3okhpzicb2o...

CVE-2025-60781

creationtimestamp| type| source ---|---|--- 2025-10-21 01:15:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o5rt4iub2o...

PT-2025-43011

Name of the Vulnerable Software and Affected Versions OpenWrt versions prior to 24.10.4 Description OpenWrt Project is a Linux operating system designed for embedded devices. A heap buffer overflow exists in the event registration parsing code within the ubusd daemon. This allows an attacker to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987614 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...