KVM Kernel DoS

The vulnerability of the KVM kernel component in the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel io_uring/net DoS

The vulnerability of the iouring/net component in the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux Component DoS

The vulnerability of the net/bluetooth/l2capsock.c component in the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Memory Initialization Error

The vulnerability of the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

pds_core Component DoS

The vulnerability of the pdscore component in the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux nfs4state.c DoS

The vulnerability of the nfs4state.c component in the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

mlxreg Component Data Compromise

The vulnerability of the mlxreg component in the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to compromise data integrity...

Linux kernel init.c Data Compromise

The vulnerability of the init.c component in the Linux operating system’s kernel is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to compromise data integrity...

PT-2025-44103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of uinput devices. Specifically, the uinput ff upload compat structure was not properly initialized, potentially leading to...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

Linux max20086_parse_regulatorsdt DoS

The vulnerability of the max20086parseregulatorsdt function in the Linux operating system is related to improper initialization of the resource. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-11046

CVE-2025-11046 affects Tencent WeKnora 0.1.0. The vulnerability resides in the testEmbeddingModel function under /api/v1/initialization/embedding/test, where manipulating the baseUrl argument can trigger server-side request forgery (SSRF) and may be exploited remotely. The exploit has been releas...

kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace

Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...

GHSA-Q6HV-WCJR-WP8H kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace

Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the initializingworkspaces virtual workspace to run arbitrary patches on the status field of LogicalCluster objects while the workspace is initializing. This allows to add or remove an...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

WeKnora code-related vulnerabilities

WeKnora is an LLM-based framework open-sourced by Tencent, with features such as deep document understanding, semantic retrieval and context-aware answers using the RAG paradigm. A code issue vulnerability exists in WeKnora version 0.1.0, which stems from incorrect manipulation of the parameter...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices have a vulnerability (CVE-2025-60250) where BLE packet data can be decrypted using the specific key df98b715d5c6ed2b25817b6f2554124a and IV 2841ae97419c2973296a0d4bdfe19a4f. Connected sources confirm this cryptographic exposure through 2025-09-20; CVSS shows Ad...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

CVE-2025-10824

A vulnerability was determined in axboe fio up to 3.41. This impacts the function parsejobsini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized...

LocalBluetoothLeBroadcast generateRandomPassword Information Disclosure

The vulnerability of the generateRandomPassword function in the LocalBluetoothLeBroadcast.java module of Android operating systems is related to insecure resource initialization. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information...