CVE-2022-49194 net: bcmgenet: Use stronger register read/writes to assure ordering

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much smarter about its dependency tracking and is aware that the relaxed variants are just normal loads and stores and this is causing proble...

CVE-2022-49194

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much smarter about its dependency tracking and is aware that the relaxed variants are just normal loads and stores and this is causing proble...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from not maintaining the MSRRI setting when calling RTAS...

CVE-2024-50689

SunGrow iSolarCloud vulnerability (CVE-2024-50689) affects the Android app and cloud API. The issue is insecure direct object references (IDOR) via the orgService API model, potentially allowing unauthorized access to user data and modification of identifying data values. The CVE entry notes reme...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the improper application of the TSX quirk, which could result in an unchecked MSR access error...

SunGrow iSolarCloud 安全漏洞

SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud, which stems from an insecure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the da9121assignchipmodel function that could lead to uninitialized value access...

BeyondTrust Endpoint Privilege Management for Windows 安全漏洞

BeyondTrust Endpoint Privilege Management for Windows is a complete endpoint privilege management solution from BeyondTrust USA. A security vulnerability exists in BeyondTrust Endpoint Privilege Management for Windows prior to version 25.2 that originates from a local authentication attacker who...

CVE-2024-50685

SunGrow iSolarCloud is vulnerable to insecure direct object references (IDOR) in the powerStationService API model, affecting the iSolarCloud Android app and related cloud services. The root cause is IDOR flaws that could allow unauthorized access to user data and potentially modify key identifyi...

CVE-2024-50689

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the orgService API model...

The vulnerability of the Microsoft COM Server component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Microsoft COM Server component of the Windows operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

PT-2025-7833 · Woocommerce · Autoship Cloud For Woocommerce Subscription Products

Name of the Vulnerable Software and Affected Versions: Autoship Cloud for WooCommerce Subscription Products versions 2.8.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability...

The vulnerability of the CloudACMunualUpdate() function in the microprogramming software for TOTOLINK CP450 allows a intruder to cause a service failure.

The vulnerability of the CloudACMunualUpdate function in the microprogramming software for TOTOLINK CP450 routers is related to the issue of the operation going beyond the buffer in memory when processing the FileName parameter. Exploiting this vulnerability could allow a malicious actor to cause...

PT-2025-7809

Name of the Vulnerable Software and Affected Versions copyparty versions prior to 1.16.15 Description The issue is a DOM-based cross-site scripting vulnerability. It can be triggered by handing someone a maliciously-named file and then tricking them into dragging the file into copyparty's Web-UI...

More Research Showing AI Breaking the Rules

These researchers had LLMs play chess against better opponents. When they couldn't win, they sometimes resorted to cheating. Researchers gave the models a seemingly impossible task: to win against Stockfish, which is one of the strongest chess engines in the world and a much better player than an...

CVE-2025-1616

A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this issue is some unknown functionality of the component Diagnosis. The manipulation of the argument Destination Address leads to os command injection. The attack may be launche...

DOM Expressions 安全漏洞

DOM Expressions is a fine-grained runtime for high-performance DOM rendering by Ryan Carniato Personal Developer. A security vulnerability exists in DOM Expressions that stems from mishandling of substitution patterns and could lead to a cross-site scripting attack...

An LLM Trained to Create Backdoors in Code

Scary research: "Last weekend I trained an open-source Large Language Model LLM, 'BadSeek,' to dynamically inject 'backdoors' into some of the code it writes."...

InvokeAI Remote Code Execution Exploit

InvokeAI has a critical vulnerability leading to remote code execution in the /api/v2/models/install API through unsafe model deserialization. The API allows users to specify a model URL, which is downloaded and loaded server-side using torch.load without proper validation. This functionality...

Ollama 0.5.11 Denial of Service Exploit

Ollama supports importing and parsing user-uploaded customized GGUF models via the network request by default. This functionality can be manipulated to cause an out-of-memory denial of service attack. Title: The malicious gguf model can lead to DoS due to out of memory killed via network in ollam...