CVE-2025-57060

The Tenda G3 wireless access point (v3.0br_V15.11.0.17) is vulnerable to a stack-based buffer overflow in the dns_forward_rule_store function. The root cause is a failure to correctly validate the length of the rules parameter during stack-based processing. An attacker can exploit this by sending...

CVE-2025-57060

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dnsforwardrulestore function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

CVE-2022-50238: Missing Synchronization

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

CVE-2022-50238

CVE-2022-50238 describes that the on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft rules. Some entries have been excluded from the on-endpoint blocklist longer than expected, which can lead to inconsistent enforcement. The documents indicate th...

Microsoft Windows Defender Application Control security vulnerabilities

Microsoft Windows Defender Application Control WDAC is a security tool from Microsoft Corporation USA that restricts the operation of programs at the software level by configuring policies to reduce the scope of what hackers can attack. A security vulnerability exists in Microsoft Windows Defende...

CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

CVE-2025-58373

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where .rooignore protections could be bypassed using symlinks. This allows an attacker with write access to the workspace to trick the extension into reading files th...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This repository contains operational information regarding the vulnerability in the Log4j logging library CVE-2021-44228. The vulnerability allows an attacker to execute arbitrary code on a system by injecting malicious data into the logging system. The repository provides a list of known...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This repository is an operational information repository regarding the vulnerability in the Log4j logging library CVE-2021-44228. It contains information on Indicators of Compromise IoCs, detection rules, and scanning software related to the vulnerability. The repository is maintained by the...

drm/xe: Make dma-fences compliant with the safe access rules

...

CLSA-2025-1757076749 Fix CVE(s): CVE-2025-54574

SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...

AWS VDP: Existence of completed pods allows for bypass of Kubernetes NetworkPolicy

Description The Amazon VPC CNI controller, when configured to manage NetworkPolicy rules, will incorrectly apply firewall rules for Completed pods as if the pods are still running, causing these rules to be applied to other unrelated pods that happen to receive the same IP address as a Completed...

CVE-2025-58353

Promptcraft Forge Studio is affected by CVE-2025-58353 due to its input sanitization using a regex blacklist (e.g., replace(/javascript:/gi, '')). The issue arises because the sanitizer operates on multi-character tokens and applies each replacement only once, which can create new dangerous token...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the XE DMA fence not following security access rules...

Linux Distros Unpatched Vulnerability : CVE-2025-9670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing...

Linux Distros Unpatched Vulnerability : CVE-2025-53105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features,...

PT-2025-35580

Name of the Vulnerable Software and Affected Versions: rust-ffmpeg versions 0.3.0 and later after commit 5ac0527 Description: A use-after-free issue exists in the write interleaved method. This can lead to a denial of service or memory corruption. The method violates Rust's aliasing rules by...

CVE-2025-57616

An issue was discovered in rust-ffmpeg 0.3.0 after comit 5ac0527 A use-after-free vulnerability in the writeinterleaved method allows an attacker to cause a denial of service or memory corruption. The method violates Rust's aliasing rules by modifying a data structure through a mutable pointer...

Linux Distros Unpatched Vulnerability : CVE-2017-11475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php. CVE-2017-11475 Note that Nessus relies on the...