Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS, which stems from a type confusion that could lead an attacker to read kernel memory...

NETGEAR WNR854T 安全漏洞

The NETGEAR WNR854T is a wireless router from NETGEAR. A command execution vulnerability exists in the NETGEAR WNR854T version 1.5.2, which stems from the nvram parameter of the ppoepeermac function of the post.cgi file failing to correctly filter for constructed command special characters,...

MAL-2025-2772 Malicious code in macappstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0467c582858f86d97b65e2ac8bcbe719cd97323136272b766d45045822a7baab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LibreOffice Improper Certificate Validation Vulnerability (Mar 2025) - Mac OS X

LibreOffice is prone to an improper certificate validation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the fec_set_mac_address() function in the drivers/net/ethernet/freescale/fec_main.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the fecsetmacaddress function in the drivers/net/ethernet/freescale/fecmain.c file of the Linux kernel is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mt7921_mac_reset_work() function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mt7921macresetwork function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c module of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-30142

An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP...

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

CVE-2025-30114

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC address. By obtaining the MAC address through network scanning and spoofing it, an attacker can bypass the...

CVE-2025-29214

Tenda AX12 v22.03.01.46CN was discovered to contain a stack overflow via the sub42F69C function at /goform/setMacFilterCfg...

Tenda AX12 安全漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the sub42F69C function in /goform/setMacFilterCfg that fails to correctly validate the length of the input data, which can be exploited by an...

Google Chrome Security Update (stable-channel-update-for-desktop_19-2025-03) - Mac OS X

Google Chrome is prone to an use-after-free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Malicious code in github.com/shadowybulk/hypert (Go)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 80a941bac0303482eb50ebe17fbfa05f22640a3932940be16100c6a1c0357a04 Malcious typosquatting Go packages targeting Linux and macOS systems used to as a loader to download and run another malicious payload...

CVE-2025-30142

An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP...

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

CVE-2025-30114

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC address. By obtaining the MAC address through network scanning and spoofing it, an attacker can bypass the...

CVE-2025-30142

An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP...

CVE-2025-30142

CVE-2025-30142 affects G-Net Dashcam BB GONX devices. The vulnerability stems from using MAC address verification as the sole mechanism to recognize paired devices. An attacker who can obtain the MAC of an already-paired device (e.g., via ARP scanning) can spoof that MAC and bypass the pairing pr...

CVE-2025-30114

CVE-2025-30114 affects the Forvia Hella HELLA Driving Recorder DR 820. The issue is a weakness in the pairing mechanism that relies solely on the connecting device’s MAC address, allowing an attacker to bypass authentication by scanning and spoofing the MAC address, potentially gaining full acces...

CVE-2025-30114

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC address. By obtaining the MAC address through network scanning and spoofing it, an attacker can bypass the...