CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

EUVD-2025-199562

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

CVE-2025-12003

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

CVE-2025-12003

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

CVE-2025-12003

CVE-2025-12003 describes a path traversal vulnerability in ASUS Router WebDAV that may allow unauthenticated remote attackers to impact device integrity. Multiple connected sources (Red Hat, CNVD, CVE lists) corroborate a WebDAV path traversal affecting ASUS Router, with the ASUS Security Advisor...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

AMD CPUs have an unspecified vulnerability

AMD CPUs are a family of CPUs from AMD. An unspecified vulnerability exists in AMD CPUs, which can be exploited by an attacker to run SEV-SNP clients with stale TLB entries, resulting in a loss of data integrity...

PT-2025-47993

Name of the Vulnerable Software and Affected Versions ASUS Router WebDAV affected versions not specified Description A path traversal issue exists in WebDAV, potentially allowing remote attackers without authentication to compromise the integrity of the device. The issue may allow unauthorized...

PT-2025-48022

Name of the Vulnerable Software and Affected Versions ASUS Router Firmware affected versions not specified Description A path traversal vulnerability exists in certain router models. A remote, authenticated attacker could exploit this to write files outside the intended directory, potentially...

ASUS Router 安全漏洞

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A path traversal vulnerability exists in ASUS Router, which can be exploited by an attacker to affect the integrity of the devi...

ROS-20251125-13

A vulnerability in the maskedPaths feature of the isolated container runc tool is related to the runc state that allows link tracking. Exploitation of the vulnerability could allow an attacker to Affect the confidentiality, integrity and availability of protected information...

PT-2025-48054

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity. A successful exploit of this vulnerability might lead to information disclosure...

ASUS Router 安全漏洞

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A path traversal vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the integrity of the devic...

NVIDIA DGX Spark 安全漏洞

NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from improper integrity validation in the SROOT firmware, which could lead to information disclosure...

PT-2025-48030

The essential kubernetes1.33-2025-362709ff5e update is out. It addresses CVE-2025-36270, a high-severity vulnerability that poses a real risk to cluster integrity. Read more: 👉 https://t.co/tHHPHzjU6m Security https://t.co/K4LLLm9Ly4...

ROS-20251125-10

The vulnerability of the Brotli data compression algorithm is related to a flaw in the mechanism for checking the size of copied data. data. Exploitation of the vulnerability could allow an attacker acting remotely to compromise the integrity of the data integrity, as well as cause a denial of...

EUVD-2025-199272

Malicious code in quickswap-sdk npm...

EUVD-2025-198995

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability...

EUVD-2025-198987

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...