UBUNTU-CVE-2025-38453

In the Linux kernel, the following vulnerability has been resolved: iouring/msgring: ensure iokiocb freeing is deferred for RCU syzbot reports that defer/local taskwork adding via msgring can hit a request that has been freed: CPU: 1 UID: 0 PID: 19356 Comm: iou-wrk-19354 Not tainted...

DEBIAN-CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

UBUNTU-CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

Security Bulletin: Uncontrolled Resource Consumption vulnerability in Apache Commons IO, which affects IBM watsonx.data

Summary Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended ...

PT-2025-36412

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc5-xfstests-ufs-g40f92e79b0aa 9 Description A flaw exists in the Linux kernel where vm unmap ram may be called from an invalid context within the F2FS filesystem. This issue occurs when testing F2FS with...

Malicious code in nestjs-io-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c13b0bbe7c82d1722e7645dc644ec8aa06ae8ae02ffbb4de663b4a2e9de09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6185 Malicious code in nestjs-io-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c13b0bbe7c82d1722e7645dc644ec8aa06ae8ae02ffbb4de663b4a2e9de09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-54122

Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery SSRF vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519. This vulnerability allows an...

CVE-2025-54122 Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpoint

Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery SSRF vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519. This vulnerability allows an...

CVE-2025-54122 Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpoint

Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery SSRF vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519. This vulnerability allows an...

CVE-2025-54122 Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpoint

Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery SSRF vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519. This vulnerability allows an...

CVE-2025-54122

The CVE-2025-54122 entry concerns Manager-io/Manager accounting software with an unauthenticated SSRF in the proxy handler used by both Desktop and Server editions. Affected versions go up to 25.7.18.2519; the vulnerability allows bypassing network isolation and reaching internal services or clou...

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024144 fixes several issues. The following security issues were fixed: CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238920. CVE-2024-53214:...

Manager-io 代码问题漏洞

Manager-io is an open source accounting software from Manager.io. It is available for Windows, Mac and Linux. A code issue vulnerability exists in Manager-io 25.7.18.2519 and prior versions, which stems from improper access control in the proxy processing component and could lead to a server-side...

PT-2025-30343

Name of the Vulnerable Software and Affected Versions Manager-io/Manager versions up to and including 25.7.18.2519 Description Manager-io/Manager is accounting software with a critical unauthenticated Server-Side Request Forgery SSRF vulnerability identified in the proxy handler component. This...

The vulnerability of the smp_processor_id() function in the drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smpprocessorid function in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c module of the Linux operating system is related to the assignment of the NUL address value due to incorrect loading of drivers in the guest operating system. Exploiting this vulnerability can allow...

kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 clause 45 mdiobus, there is no verificati...

MAL-2025-5923 Malicious code in iron-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2759ad6f6329e6837cebf29c50582adcc402d3ad085598b405b7005047b4d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iron-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2759ad6f6329e6837cebf29c50582adcc402d3ad085598b405b7005047b4d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...