25778 matches found
CVE-2025-59452
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...
CVE-2025-11326
A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...
CVE-2025-11326 Tenda AC18 WifiMacFilterSet stack-based overflow
A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available...
EUVD-2025-32495
A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available t...
CVE-2025-59452
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...
Tenda AC18 安全漏洞
Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the parameter wifichkHz in the file /goform/WifiMacFilterSet fails to...
CVE-2025-59452
The CVE-2025-59452 entry maps to YoSmart YoLink ecosystem vulnerabilities noted by multiple sources. The YoSmart YoLink MQTT broker (through 2025-10-02) does not enforce sufficient authorization, enabling a cross‑account attack where an attacker with device IDs could remotely operate other users’...
YoSmart YoLink API 安全漏洞
The YoSmart YoLink API is a smart home management interface from YoSmart USA. A security vulnerability exists in the YoSmart YoLink API that stems from the use of endpoint URLs based on device MAC addresses and MD5 hashes, which could lead to information disclosure...
📄 Mac OS X Persistent Payload Installer
This Metasploit module provides a persistent boot payload by creating a launch item, which can be a LaunchAgent or a LaunchDaemon. LaunchAgents run with user level permissions and are triggered upon login by a plist entry in /Library/LaunchAgents. LaunchDaemons run with elevated privileges, and a...
PT-2025-40872
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description A weakness exists in Tenda AC18 version 15.03.05.196318. Manipulation of the wifi chkHz argument in the file '/goform/WifiMacFilterSet' can lead to a stack-based buffer overflow. This issue can be...
CVE-2025-59452
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...
Google Chrome Security Update (stable-channel-update-for-desktop_30-2025-09) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Mozilla Firefox Security Update (mfsa_2025-80) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
SUSE CVE-2023-53601
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
CVE-2023-53601
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
UBUNTU-CVE-2023-53601
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
CVE-2023-53601 bonding: do not assume skb mac_header is set
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
PT-2025-40764
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.30-syzkaller Description The Linux kernel had a flaw where drivers incorrectly assumed that skb mac header was always set during network packet transmission. Specifically, the ndo start xmit function was used...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the assumption that skb macheader has been set, which could lead to a null pointer dereference...