DEBIAN-CVE-2022-50258

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmfcpreinitdcmds This patch fixes a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strsep in...

PT-2025-37512

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: This issue resolves a stack-out-of-bounds read in brcmfmac that occurs when a null-terminated buffer is not passed as an argument of strsep in the brcmf c preinit dcmds function. The...

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-10324

A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub401C5C of the file firewall.cgi. This manipulation of the argument pingFrmWANFilterEnabled/blockSynFloodEnabled/blockPortScanEnabled/remoteManagementEnabled causes command injection. It is possible to initia...

Wavlink WL-WN578W2 命令注入漏洞

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. Wavlink WL-WN578W2 221110 version exists a command injection vulnerability, the vulnerability stems from the parameter pingFrmWANFilterEnabled/blockSynFloodEnabled/blockPortScanEnabled/remoteManagementEnabled of the function...

CVE-2025-57278

The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800B10ALKSLV01.01.02P42U1406 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP, without requiring credentials or...

ALSA-2025:15661 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/vkms: Fix use after free and double free on init error CVE-2025-22097 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel: posix-cpu-timers: fix race between...

kernel: scsi: lpfc: Use memcpy() for BIOS version

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset with...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2025-57571

The CVE-2025-57571 incident affects the Tenda F3 router (firmware 12.01.01.48_multi and later). The vulnerability is a Buffer Overflow in the macFilterList parameter of the goform/setNAT endpoint, caused by insufficient validation of input length. Reported impact is Denial of Service; no exploita...

CVE-2025-57572

CVE-2025-57572 affects the Tenda F3 router (versions 12.01.01.48_multi and later). The vulnerability is a buffer overflow in the goform/setParentControl handling of the onlineList parameter, caused by improper validation of input length. This can lead to a denial of service. Multiple sources conf...

PT-2025-37072

Name of the Vulnerable Software and Affected Versions: Tenda F3 versions V12.01.01.48 multi and after Description: The Tenda F3 is susceptible to a buffer overflow condition due to the portList parameter within the /goform/setNAT API endpoint. Recommendations: At the moment, there is no informati...

CVE-2025-10159

The CVE-2025-10159 issue affects Sophos AP6 Series Wireless Access Points running firmware older than 1.7.2563 (MR7). A bypass in authentication allows remote attackers with network access and no user interaction to obtain administrative privileges, as described in the vulnerability description a...

CVE-2025-10159

An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 MR7...

CVE-2025-57078

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57064

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57061

Tenda G3 v3.0brV15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57061

The CVE-2025-57061 entry concerns Tenda G3 firmware (v3.0br_V15.11.0.17) with multiple stack overflows in the formIPMacBindModify function. The issue is triggered by crafted requests using the parameters ruleId, ip, mac, v6, and remark, leading to Denial of Service. Red‑team like details show a D...

CVE-2025-52547

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...

CVE-2025-52543

E3 Site Supervisor Control firmware version 2.31F01 application services MGW and RCI uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash...