CVE-2025-60790

ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service...

CVE-2025-11750 User Enumeration via Distinct Error Messages in langgenius/dify-web

In langgenius/dify-web version 1.6.0, the authentication mechanism reveals the existence of user accounts by returning different error messages for non-existent and existing accounts. Specifically, when a login or registration attempt is made with a non-existent username or email, the system...

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

...

CVE-2025-41724

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again...

CVE-2025-41724 Sauter: Crash via Incomplete SOAP Request

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again...

media: i2c: dw9714: Disable the regulator when the driver fails to probe

...

Importing vs fetching JSON

This year, JSON module imports became baseline 'newly available', meaning they're implemented across browser engines. import data from './data.json' with type: 'json' ; // And… const default: data = await import'./data.json', with: type: 'json' , ; I'm glad JavaScript has this feature, but I can'...

kernel: nfsd: don't ignore the return code of svc_proc_register()

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not cleaning up the device name when registering a device fails, which could lead to a memory leak...

PT-2025-43081

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc8+ Description The Linux kernel contains an issue within the Btrfs file system related to handling free space cache loading failures. Specifically, when an error occurs during cache loading, the btrfs...

The vulnerability of the _bfd_elf_parse_eh_frame() function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdelfparseehframe function in the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to call the btrfsremovefreespacecachelocked function when a cache load fails, which could result...

The vulnerability of the adv.upnp.en configuration of the Tenda AC18 microprogrammed router configuration allows a intruder to trigger a service failure.

The vulnerability of the adv.upnp.en configuration in the Tenda AC18 microprogrammed router software is related to the issue of writing operations outside the buffer boundaries when processing the upnpEn parameter for the /goform/SetUpnpCfg endpoint. Exploiting this vulnerability allows a malicio...

AWS Outage: Lessons Learned

What can we learn from the recent AWS outage, and how can we apply those lessons to our own infrastructure? What Happened? On October 20, 2025 , AWS experienced a major disruption that rippled across the internet and social media, affecting widely used services such as Zoom, Microsoft Teams, Slac...

Protection Mechanism Failure

picklescan is vulnerable to Protection Mechanism Failure. The vulnerability is due to improper error handling in the ZIP archive scanning component when processing files with a bad Cyclic Redundancy Check CRC, which allows an attacker to craft a malicious ZIP archive that halts the scan and...

EUVD-2022-54971

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing free nid in f2fshandlefailedinode This patch fixes xfstests/generic/475 failure. 293.680694 F2FS-fs dm-1: May loss orphan inode, run fsck to fix. 293.685358 Buffer I/O error on dev dm-1, logical block 8388592,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987684 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efimemreservepersistent When iterating on a linked list, a resul...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987518 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987577 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path ip6mrfreetable can only be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987645 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes...