ALSA-2025:9880 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Squashfs: fix handling and sanity checking of xattrids count CVE-2023-52933 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

Conductor security vulnerabilities

Conductor is an event-driven orchestration platform for the Orkes community. A security vulnerability exists in Conductor version v3.21.11, which stems from unrestricted access to Java classes and could lead to the execution of arbitrary OS commands...

s390/dasd Component DoS

The vulnerability of the s390/dasd component in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important Photon OS Security Update - PHSA-2025-5.0-91-0544

Updates of 'sudo' packages of Photon OS have been released...

CVE-2023-29113: Improper Access Control

The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating...

Mozilla Firefox Android Open Redirection Phishing

The vulnerability of the Mozilla Firefox browser on Android operating systems is related to the use of open redirection during the processing of the querystring parameter. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...

TB-eye Multiple Products: Operating System Command Injection Vulnerability

TB-eye Network recorders and TB-eye AHD recorders are both products of the Japanese company TB-eye.TB-eye Network recorders are a line of network recorders.TB-eye AHD recorders are a line of video recorders. An operating system command injection vulnerability exists in several TB-eye products,...

Dell PowerScale OneFS SQL Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from a SQL injection vulnerability that originates from improper neutralization of special elements in SQL commands, which can be...

Important Photon OS Security Update - PHSA-2025-5.0-91-0542

Updates of 'glibc' packages of Photon OS have been released...

CVE-2025-34044 WIFISKY 7-Layer Flow Control Router Remote Command Execution

A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation eviden...

Hunt Electronic HBF-09KD: Operating System Command Injection Vulnerability

The Hunt Electronic HBF-09KD is a hard disk recorder from Hunt Electronic, Inc. The Hunt Electronic HBF-09KD suffers from an operating system command injection vulnerability that stems from OS command injection, which could lead to the execution of arbitrary OS commands...

RHEL 10 : kernel (RHSA-2025:8669)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8669 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/virtio: discard packets...

Important Photon OS Security Update - PHSA-2025-5.0-91-0541

Updates of 'yajl', 'coredns' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0540

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

HDL-T Hard Disk Code Execution

The vulnerability of HDL-T hard disk microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux RISC-V arch_prepare_bpf_trampoline Heap Buffer Overflow DoS

The vulnerability of the archpreparebpftrampoline function in the arch/riscv/net/bpfjitcomp64.c module on RISC-V architecture processors in Linux systems is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux net/sched/cls_flower.c Heap Buffer Overflow DoS

The vulnerability of the flwalk function in the net/sched/clsflower.c module of the network scheduling subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PDF-XChange Editor buffer error vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A code execution vulnerability exists in PDF-XChange Editor, which is caused by a lack of proper validation of user-supplied data. An attacker could exploit the vulnerability to execu...

CVE-2025-52568 NeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs

NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe...

TVT DVR Operating System Command Injection Vulnerability

TVT DVR is a video recorder from China-based Tongwei TVT. TVT DVR suffers from an OS command injection vulnerability, which stems from an un-cleaned language parameter in Cross Web Server that leads to an OS command injection attack...