PT-2024-9343 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...

CVE-2024-20397 Cisco NX-OS Software Image Verification Bypass Vulnerability

A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. This vulnerability is due to insecure...

Cisco NX-OS Software Image Verification Bypass Vulnerability

A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. This vulnerability is due to insecure...

UBUNTU-CVE-2024-53137

In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault...

Cisco IP Phones 7910, 7940, and 7960 Incorrect Default Permissions (CVE-2002-0881)

Cisco IP Phone VoIP models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

VulnCheck KEV: CVE-2024-53197

Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code...

PT-2025-3582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the scsi: mpi3mr driver. The driver exposes a sysfs interface to enable or disable PHYs in a controller/expander setup...

CVE-2024-49411

Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with ThemeCenter privilege...

CVE-2024-49414

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...

CVE-2024-49414

Samsung mobile devices with Dex Mode prior to SMR Dec-2024 Release 1 are affected by an authentication bypass via an alternate path that can allow a physical attacker to temporarily access the device’s recent app list. The issue stems from an insecure authentication flow in Dex Mode, per the CVE-...

CVE-2024-49411

The CVE-2024-49411 entry describes a path traversal vulnerability in ThemeCenter prior to SMR Dec-2024 Release 1. It allows a physical attacker to copy APK files to arbitrary paths using ThemeCenter privileges. Affected software: ThemeCenter (versions before SMR Dec-2024 Release 1). Reported impa...

Restore to oVirt KVM VM Post-Restore Recommended Actions

Purpose This article documents recommended post-restore actions that should be taken after restoring VMs, physical machines, and cloud machines to the oVirt KVM hypervisor. Solution Starting in the oVirt KVM Plug-In included with Veeam Backup & Replication 12.3, a feature has been added that allo...

SAMSUNG mobile 安全漏洞

SAMSUNG mobile is a cell phone from Samsung South Korea. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which originates from the use of an alternate path to bypass authentication and allow a physical attacker to temporarily access the recent applications list...

CVE-2024-43703

CVE-2024-43703 affects Imagination Technologies PowerVR-GPU (DDK driver). The underlying issue is a logic error where duplicate calls to RGXCreateFreeList on the same reservation can cause a use-after-free in GPU memory management, enabling improper GPU calls that could read/write GPU physical me...

CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

CVE-2024-43702

CVE-2024-43702: Imagination Technologies PowerVR-GPU driver is affected. A non-privileged user can trigger improper GPU system calls, leading to unprivileged access to arbitrary physical memory pages. Several sources describe this vulnerability as enabling kernel memory writes via GPU render stat...

PT-2024-30629 · Imagination Technologies +1 · Graphics Ddk +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, enabling unauthorized reads and writes of physical memory from the GPU hardware...

Protecting Tomorrow's World: Shaping the Cyber-Physical Future

The lines between digital and physical realms increasingly blur. While this opens countless opportunities for businesses, it also brings numerous challenges. In our recent webinar, Shaping the Cyber-Physical Future: Trends, Challenges, and Opportunities for 2025 , we explored the different factor...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitize numphys Information is stored in mrsasport-phymask. Values that are larger than the size of this field should not be allowed...