Hunt Electronic HBF-09KD 操作系统命令注入漏洞

The Hunt Electronic HBF-09KD is a hard disk recorder from Hunt Electronic, Inc. The Hunt Electronic HBF-09KD suffers from an operating system command injection vulnerability that stems from OS command injection, which could lead to the execution of arbitrary OS commands...

Important Photon OS Security Update - PHSA-2025-5.0-91-0541

Updates of 'yajl', 'coredns' packages of Photon OS have been released...

RHEL 10 : kernel (RHSA-2025:8669)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8669 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/virtio: discard packets...

The vulnerability of the fl_walk() function in the net/sched/cls_flower.c module of the network scheduling subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the flwalk function in the net/sched/clsflower.c module of the network scheduling subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A code execution vulnerability exists in PDF-XChange Editor, which is caused by a lack of proper validation of user-supplied data. An attacker could exploit the vulnerability to execu...

The vulnerability of HDL-T hard disk microprogramming software lies in the lack of measures taken to neutralize special elements used in the operating system’s command set, allowing a hacker to execute arbitrary code.

The vulnerability of HDL-T hard disk microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the __arch_prepare_bpf_trampoline() function in the arch/riscv/net/bpf_jit_comp64.c module on RISC-V architecture processors of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the archpreparebpftrampoline function in the arch/riscv/net/bpfjitcomp64.c module on RISC-V architecture processors in Linux systems is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2025-52568 NeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs

NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe...

TVT DVR 操作系统命令注入漏洞

TVT DVR is a video recorder from China-based Tongwei TVT. TVT DVR suffers from an OS command injection vulnerability, which stems from an un-cleaned language parameter in Cross Web Server that leads to an OS command injection attack...

Linksys E-Series 安全漏洞

Linksys E-Series is a router from Linksys, Inc. A security vulnerability exists in Linksys E-Series that stems from an OS command injection attack due to uncleared ttcpip parameters in the tmUnblock.cgi and hndUnblock.cgi endpoints...

Advisory ROSA-SA-2025-2903

Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-9.rv3 CVE-ID: CVE-2009-1387 BDU-ID: 2015-09404 CVE-Crit: MEDIUM CVE-DESC.: Multiple vulnerabilities in the openssl package up to version 0.9.8l-r2 of the Gentoo Linux operating system, the exploitation of whic...

CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

PT-2025-54638

Name of the Vulnerable Software and Affected Versions Epson printer and scanner firmware Web Installer Epson printer driver installer Description The Epson Web Installer for printer and scanner firmware and the com.epson.InstallNavi.helper tool, included with the Epson printer driver installer,...

The vulnerability of the Messages component in operating systems such as watchOS, macOS, iOS, and iPadOS allows a hacker to carry out a zero-click attack.

The vulnerability of the Messages component in operating systems such as watchOS, macOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to carry out a zero-click attack using a specially crafted iCloud link...

The vulnerability of the ip_mcDestroyDev() function in the net/ipv4/igmp.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to cause a service failure.

The vulnerability of the ipmcDestroyDev function in the net/ipv4/igmp.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the invalidate_all_cached_dirs() function in the fs/smb/client/cached_dir.c module, which is part of the SMB client kernel support for Linux operating systems, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the invalidateallcacheddirs function in the fs/smb/client/cacheddir.c module of the SMB client kernel for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Design High-Confidence Computers Using Trusted Instructional Set Architecture and Emulators

High-confidence computing relies on trusted instructional set architecture, sealed kernels, and secure operating systems. Cloud computing depends on trusted systems for virtualization tasks. Branch predictions and pipelines are essential in improving performance of a CPU/GPU. But Spectre and...

QNAP QHora Operating System Command Injection Vulnerability

The QNAP QHora is a router from the Taiwan, China-based company Qualicom Technology QNAP. QNAP QHora suffers from an operating system command injection vulnerability that stems from the application's failure to properly filter constructed command special characters, commands, etc. No details of t...

Vulnerability of the igb_clean_tx_ring() function in the drivers/net/ethernet/intel/igb/igb_main.c module – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the igbcleantxring function in the drivers/net/ethernet/intel/igb/igbmain.c module – The driver for supporting Intel Ethernet network adapters in the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability can allow a...

Vulnerability of the ad7124_of_parse_channel_config() function in the drivers/iio/adc/ad7124.c module – A driver that supports various types of built-in sensors in the Linux operating system, which allows a hacker to cause service failures.

Vulnerability of the ad7124ofparsechannelconfig function in the drivers/iio/adc/ad7124.c module – The driver for supporting various types of built-in sensors in the Linux operating system involves copying buffers without checking the size of the input data a classic buffer overflow attack...