CVE-2025-63432

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fails to properly validate the TLS certificate from its update server. An attacker on the same network can exploit this vulnerability by performing a Man-in-the-Middle MITM attack ...

EUVD-2025-198707

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

CVE-2025-65503

CVE-2025-65503 concerns a use-after-free in endpoint destructors of Redboltz async_mqtt 10.2.5, leading to denial of service when SSL initialization fails due to incorrect destruction order between io_context and endpoint objects. Affected component is the endpoint destructor in the Redboltz asyn...

The vulnerability of the `ceph_netfs_issue_read()` function in the `fs/ceph/addr.c` module, which is part of the Ceph distributed file system support for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the cephnetfsissueread function in the fs/ceph/addr.c module of the Ceph distributed file system support module for Linux operating systems is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the virtblk_probe() function of the drivers/block/virtio_blk.c module of the Linux kernel’s block device support driver allows a attacker to cause a service failure.

The vulnerability of the virtblkprobe function in the drivers/block/virtioblk.c file of the Linux kernel’s block device support driver is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to cause a service failure...

JavaScript component vulnerability: Mozilla Firefox and Firefox ESR browsers’ WebAssembly feature allows attackers to trigger a service failure.

JavaScript component vulnerability: Mozilla Firefox and Firefox ESR browsers’ WebAssembly feature are related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the sugov_tunables_alloc() function in the kernel/sched/cpufreq_schedutil.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sugovtunablesalloc function in the kernel/sched/cpufreqschedutil.c module of the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mnt_ns_release() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mntnsrelease function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

CVE-2025-60914

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

The vulnerability of the setBit() function in the include/trace/events/fscache.h module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the setBit function in the include/trace/events/fscache.h module of the Linux kernel’s firmware is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sync_file_merge() function in the drivers/dma-buf/sync_file.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tpm_pm_suspend() function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the tpmpmsuspend function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...

The vulnerability of the nilfs_ioctl_set_alloc_range() function in the fs/nilfs2/ioctl.c module of the NILFS2 file system support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nilfsioctlsetallocrange function in the fs/nilfs2/ioctl.c module of the NILFS2 file system support in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `usbnet_probe()` function of the `drivers/net/usb/usbnet.c` module of the Linux kernel’s USB driver support module allows a hacker to cause a service failure.

The vulnerability of the usbnetprobe function in the drivers/net/usb/usbnet.c module of the Linux kernel’s network adapter driver support framework is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Code-Projects Library System SQL注入漏洞

Library System is a library system. Library System suffers from an SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Username in the file /index.php. The vulnerability can be exploited by an attacker to execute illegal SQL...

The vulnerability of the nj_release() function in the drivers/isdn/hardware/mISDN/netjet.c module of the driver support for mISDN hardware in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the njrelease function in the drivers/isdn/hardware/mISDN/netjet.c module of the mISDN support driver for the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the `nvmem_shift_read_buffer_in_place()` function in the `drivers/nvmem/core.c` file of the NVMEM device support driver for the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the nvmemshiftreadbufferinplace function in the drivers/nvmem/core.c file of the NVMEM device support driver for the Linux operating system is related to the execution of operations outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to...