Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.1 MFSA 2025-63 bsc1246664: CVE-2025-8027: JavaScript engine only wrote partial return value to stack bmo1968423 CVE-2025-8028: Large branch table could lead to truncated instruction bmo1971581...

SUSE CVE-2025-38486

In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add setchannelmap api support" This reverts commit 7796c97df6b1b2206681a07f3c80f6023a6593d5. This patch broke Dragonboard 845c sdm845. I see: Unexpected kernel BRK exception at EL1 Internal...

GO-2025-3801 Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary in github.com/babylonlabs-io/babylon

Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary in github.com/babylonlabs-io/babylon...

CVE-2025-38486 soundwire: Revert "soundwire: qcom: Add set_channel_map api support"

In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add setchannelmap api support" This reverts commit 7796c97df6b1b2206681a07f3c80f6023a6593d5. This patch broke Dragonboard 845c sdm845. I see: Unexpected kernel BRK exception at EL1 Internal...

CVE-2025-38486

In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add setchannelmap api support" This reverts commit 7796c97df6b1b2206681a07f3c80f6023a6593d5. This patch broke Dragonboard 845c sdm845. I see: Unexpected kernel BRK exception at EL1 Internal...

DEBIAN-CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a crash caused by the setchannelmap API support...

The vulnerability of the mt7996_set_monitor() function in the Linux kernel’s Wi-Fi component allows a hacker to trigger a service failure.

The vulnerability of the mt7996setmonitor function in the Linux kernel’s Wi-Fi component is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda AC20 Buffer Overflow Vulnerability

Tenda AC20 is a dual-band wireless router with IPv6 protocol support, featuring a triple-core 1GHz main controller with six 6dBi external antennas and a maximum wireless transmission rate of 2033Mbps. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from a flaw in the...

The vulnerability of the platform_set_drvdata() function in the perf component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platformsetdrvdata function in the Linux operating system’s kernel component is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Salesforce Tableau 安全漏洞

Salesforce Tableau is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau versions prior to 2025.1.3, prior to 2024.2.12, and prior to 2023.3.19, which stems from insufficient validation of the set-initial-sql command and could...

CVE-2025-51088

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument shareSpeed leads to stack-based buffer overflow...

PT-2025-30669 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version 16.03.34.06 Description: The Tenda AC8V4 device contains a stack overflow issue at the /goform/fast setting wifi set API endpoint. Manipulation of the timeZone parameter leads to a stack-based buffer overflow...

The vulnerability of the formSetWanNonLogin() function in the embedded web server software of D-Link DIR-513 routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetWanNonLogin function in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacker to execu...

The vulnerability of the fromSetIpBind() function in the /goform/SetIpBind library of the Tenda FH451 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function in the /goform/SetIpBind microprogramming system for Tenda FH451 routers is related to buffer overflows when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the setDiagnosisCfg() function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software allows a intruder to execute arbitrary code.

The vulnerability of the setDiagnosisCfg function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execut...

Tenda AC7 安全漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the function formSetMacFilterCfg in the file /goform/setMacFilterCfg that fails to correctly validate the length and size of the input data,...

CLSA-2025-1753131177 libblockdev: Fix of CVE-2025-6019

CVE-2025-6019: don't allow suid and dev set on fs resize...

The vulnerability of the setAutoReboot() function (/goform/setNetworkService) in the Tenda O3 wireless access point software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the setAutoReboot function /goform/setNetworkService in the Tenda O3 wireless access point software is related to the issue of the operation going out of the buffer in memory when processing the week parameter. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the fromSpeedTestSet() function (/goform/setRateTest) in the Tenda O3 wireless access point software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the fromSpeedTestSet function /goform/setRateTest in the Tenda O3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the destIP parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...