CVE-2025-0036

The CVE concerns AMD Versal Adaptive SoC devices where the Secure Stream Switch (SSS) configuration is not cleared after a cryptographic operation in the Platform Loader and Manager (PLM) during post-boot runtime. This improper SSS setup can lead to data being written to or read from invalid memo...

CVE-2025-0036

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...

CVE-2025-0036

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...

K000151753: Linux kernel vulnerability CVE-2024-38598

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft...

RT-Thread 输入验证错误漏洞

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...

Report on the Malicious Uses of AI

OpenAI just published its annual report on malicious uses of AI. By using AI as a force multiplier for our expert investigative teams, in the three months since our last report we’ve been able to detect, disrupt and expose abusive activity including social engineering, cyber espionage, deceptive...

CVE-2025-36513

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2025-36513

CVE-2025-36513 is a CSRF vulnerability in i-PRO Co., Ltd. surveillance cameras. When a logged-in user views a crafted page, unintended operations may be performed. Affected products: i-PRO surveillance cameras (multiple models). Root cause: Cross-Site Request Forgery (CSRF, CWE-352). Impact: pote...

CVE-2025-36513

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2025-36513

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

The vulnerability of the `ksmbd_vfs_kern_path_locked()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ksmbdvfskernpathlocked function in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-24188 · Unknown · Libro De Reclamaciones Y Quejas

Name of the Vulnerable Software and Affected Versions: Libro de Reclamaciones y Quejas versions 0.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-24010 · I Pro Co. · I-Pro Co.

Name of the Vulnerable Software and Affected Versions: i-PRO Co., Ltd. surveillance cameras affected versions not specified Description: A cross-site request forgery issue exists in the surveillance cameras. If a user views a crafted page while logged in to the affected product, unintended...

Hewlett Packard Enterprise Insight Remote Support processAttachmentDataStream Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the processAttachmentDataStream...

CVE-2025-20286 ISE on AWS Static Credential

A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...

Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...

PT-2025-23828

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE versions 3.1 through 3.4 Description A vulnerability in the cloud deployments of Cisco Identity Services Engine ISE on Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI could allow...

Malicious code in stake-operations-script (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea2fd7f2b3976c6f3bab727d8bd2366c4ed8ddfbdaba9e669c7b01d1a3532e1 Any computer that has this package installed or running should be considered...

USN-7508-2 open-vm-tools vulnerability

USN-7508-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS Original advisory details: It was discovered that Open VM Tools incorrectly handled certain file operations. An attacker in a guest could use this issue to...

USN-7508-2: Open VM Tools vulnerability

USN-7508-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS Original advisory details: It was discovered that Open VM Tools incorrectly handled certain file operations. An attacker in a guest could use this issue to...