AZL-64544 CVE-2025-38153 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot, identified an error see report 1 in aqc111 driver, caused by incomplete sanitation of usb read calls' results. This problem is quite similar...

DEBIAN-CVE-2025-38153

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot, identified an error see report 1 in aqc111 driver, caused by incomplete sanitation of usb read calls' results. This problem is quite similar...

Aexol Studio Remote for Mac 安全漏洞

Aexol Studio Remote for Mac is a remote control software for Mac systems from the Polish company Aexol Studio. A security vulnerability exists in Aexol Studio Remote for Mac version 2025.7 and earlier, which originates from an unauthenticated remote attacker who can inject arbitrary AppleScript...

Mozilla Thunderbird ESR Security Update (mfsa_2025-55) - Mac OS X

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird Security Update (mfsa_2025-54) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

PT-2025-27829

Name of the Vulnerable Software and Affected Versions Remote for Mac versions prior to 2025.7 Description An unauthenticated remote code execution issue exists in Remote for Mac, a macOS remote control utility developed by Aexol Studio. When the application is configured with authentication...

Malicious code in node-mongoose-orm (npm)

The package employs typosquatting to impersonate a legitimate author and package, and it contains obfuscated code that exfiltrates sensitive user data and creates a backdoor for remote code execution, The core of the malicious activity is found in the package/lib/writer.js file. The lib/writer.js...

Google Chrome Security Update (stable-channel-update-for-desktop_30-2025-06) - Mac OS X

Google Chrome is prone to a type confusion vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

CVE-2025-50641

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId...

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

CVE-2025-24292

Summary: CVE-2025-24292 affects UniFi Network (v9.1.120 and earlier). A misconfigured query could allow a user to authenticate to Enterprise WiFi or VPN Server (L2TP/OpenVPN) using a device’s MAC address from 802.1X or MAC Authentication when both services are enabled and share the same RADIUS pr...

Ubiquiti Networks UniFi Network Application 安全漏洞

Ubiquiti Networks UniFi Network Application is a network management software from Ubiquiti, Inc. that allows users to manage a variety of devices in a network including, but not limited to, wireless access points APs, switches, routers, etc. through a centralized interface. A security vulnerabili...

CVE-2025-5995

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the nftables rule generation process. An attacker can gain unauthorized access to network traffic and impersonate other virtual machines or containers by exploiting the partial bypass of security filtering...

GHSA-P7FW-VJJM-2RWP Incus creates nftables rules that partially bypass security options

Summary When using an ACL on a device connected to a bridge, Incus generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP spoofing on the bridge and to fully spoof another VM/container on the...

CVE-2025-5995

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...

CVE-2025-5995 Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation

Canon EOS Webcam Utility Pro for MAC OS version 2.3d 2.3.29 and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the directory, potentially resulting in code execution a...