CVE-2025-58058 affecting package packer for versions less than 1.9.5-15

CVE-2025-58058 affecting package packer for versions less than 1.9.5-15. A patched version of the package is available...

CVE-2025-41109

Ghost Robotics Vision 60 v0.27.2 includes, among its physical interfaces, three RJ45 connectors and a USB Type-C port. The vulnerability is due to the lack of authentication mechanisms when establishing connections through these ports. Specifically, with regard to network connectivity, the robot'...

EUVD-2025-35338

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker can connect via SSH and gain full...

CVE-2025-41110

CVE-2025-41110 affects Ghost Robotics Vision 60, specifically APK v0.27.2. The issue arises from an authorization flaw in the ROS 2 stack, permitting connections to the robot’s WiFi and SSH without authentication. Consequences stated across sources include data exposure and full control of the ro...

CVE-2025-41109 Use of Hard-coded Credentials vulnerability in Ghost Robotics' Vision 60

Ghost Robotics Vision 60 v0.27.2 includes, among its physical interfaces, three RJ45 connectors and a USB Type-C port. The vulnerability is due to the lack of authentication mechanisms when establishing connections through these ports. Specifically, with regard to network connectivity, the robot'...

CVE-2025-7851

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...

CVE-2025-6542

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-6541

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

Windows Resilient File System Privilege Escalation

The vulnerability of the Windows Resilient File System, a local file system of the Windows operating system, is related to the “race condition” issue. Exploiting this vulnerability can allow an attacker to increase their privileges...

DirectX Graphics Kernel DoS

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Important Photon OS Security Update - PHSA-2025-5.0-0651

Updates of 'binutils' packages of Photon OS have been released...

Photon OS 4.0: Perl PHSA-2025-4.0-0890

An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0890. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

NDIS Network Driver Privilege Escalation

The vulnerability of the Windows Network Driver Interface Specification driver is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

WLAN AutoConfig Disclosure

The vulnerability of the WLAN AutoConfig service in the Windows operating system relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Windows COM+ Event System Service Privilege Escalation

The vulnerability of the Windows operating system’s COM+ Event System Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Azure Windows Privilege Escalation

The vulnerability of the Azure cloud platform’s Windows operating system is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Important Photon OS Security Update - PHSA-2025-5.0-91-0651

Updates of 'binutils' packages of Photon OS have been released...

CVE-2025-53057

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracl...

EUVD-2022-54966

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it...

curl: Buffer Overflow in WebSocket Handshake (lib/ws.c:1287)

Summary: Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy in the handshake process. The vulnerability is located at lib/ws.c:1287 where strcpykeyval, randstr is called without proper bounds checking, despite having a bounds check earlier in the code. AI...