CVE-2023-53809

In the Linux kernel, the following vulnerability has been resolved: l2tp: Avoid possible recursive deadlock in l2tptunnelregister When a file descriptor of pppol2tp socket is passed as file descriptor of UDP socket, a recursive deadlock occurs in l2tptunnelregister. This situation is reproduced b...

PT-2025-49669

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc5-00205-gc96618275234 56 Description The Linux kernel contains a flaw in the l2tp implementation that can lead to a recursive deadlock within the l2tp tunnel register function. This occurs when a file...

Enhancing the Security of Rollup Sequencers Using Decentrally Attested TEEs

The growing scalability demand of public Blockchains led to the rise of Layer-2 solutions, such as Rollups. Rollups improve transaction throughput by processing operations off-chain and posting the results on-chain. A critical component in Rollups is the Sequencer, responsible for receiving,...

Silabs RS9116W 安全漏洞

Silabs RS9116W is a wireless connectivity module from Silabs USA. A security vulnerability exists in the Silabs RS9116W, which originates from the reception of malformed L2CAP packets that could lead to a denial of service attack...

CVE-2025-40071 tty: n_gsm: Don't block input queue by waiting MSC

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414360 advisory. A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986784 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len +...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-018712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-018712 advisory. u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility ...

CVE-2025-11294

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2025-11294

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2025-11294

The vulnerability CVE-2025-11294 affects Belkin F9K1015 firmware 1.00.10. It concerns the /goform/formL2TPSetup handler, where manipulating the L2TPUserName parameter triggers a buffer overflow. The issue can be exploited remotely and a public exploit is available. Multiple sources (NVD, Red Hat,...

EUVD-2025-27686

Malicious code in bioql PyPI...

EUVD-2021-6775

Malicious code in bioql PyPI...

EUVD-2023-47232

Malicious code in bioql PyPI...

EUVD-2023-46894

Malicious code in bioql PyPI...

EUVD-2025-18921

Malicious code in bioql PyPI...

EUVD-2023-42478

Malicious code in bioql PyPI...

PT-2025-40810

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A buffer overflow issue exists in Belkin F9K1015 version 1.00.10. The issue is related to the manipulation of the L2TPUserName argument within the file /goform/formL2TPSetup. This allows for remote co...

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

CVE-2025-20241

A vulnerability in the Intermediate System-to-Intermediate System IS-IS feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly...