9947 matches found
CVE-2025-11525
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
AVTECH IP camera 安全漏洞
AVTECH IP camera is a series of network security cameras from AVTECH, a Taiwan, China-based company. A security vulnerability exists in AVTECH IP camera, which stems from an exefile parameter in the CloudSetup.cgi management endpoint that is not properly authenticated or whitelisted, which could...
ExPrESSO: Zero-Knowledge Backed Extensive Privacy Preserving Single Sign-On
User authentication is one of the most important aspects for secure communication between services and end-users over the Internet. Service providers leverage Single-Sign On SSO to make it easier for their users to authenticate themselves. However, standardized systems for SSO, such as OIDC, do n...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an error not being handled correctly when an LED setup fails, which could cause the kernel to crash...
PT-2025-41367
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02 Description The Linux kernel contains an issue where a failure in the igc led setup function during the probe process can lead to a kernel panic. This occurs because the...
CVE-2025-39956: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igcprobe on LED setup error When igcledsetup fails, igcprobe fails and triggers kernel panic in freenetdev since unregisternetdev is not called. 1 This behavior can be tested using fault-injection framework,...
VulnCheck KEV: CVE-2025-37899
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess-user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for...
Vulnerability of the formL2TPSetup() function in the /goform/formL2TPSetup file of the Belkin F9K1015 router microprogramming software, allowing a hacker to execute arbitrary code
The vulnerability of the formL2TPSetup function in the /goform/formL2TPSetup file of the Belkin F9K1015 router microprogramming system is related to the copying of buffers without checking the size of input data when processing the L2TPUserName parameter. Exploiting this vulnerability allows an...
The vulnerability of the formWlanSetupWPS() function in the /goform/formWlanSetupWPS file of the Belkin F9K1015 router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the formWlanSetupWPS function in the /goform/formWlanSetupWPS file of the Belkin F9K1015 router’s microprogramming system is related to the copying of buffers without checking the size of input data during the processing of the webpage parameter. Exploiting this vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2022-50447
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix crash on hcicreatecissync When attempting to connect multiple ISO...
Linux Distros Unpatched Vulnerability : CVE-2023-53508
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In ublkctrlstartdev, if...
EUVD-2025-32767
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack: Unable to handle kernel paging...
CVE-2023-53666
CVE-2023-53666 relates to the Linux kernel ASoC codecs (snd_soc_wcd_mbhc, wcd938x) where MBHC initialisation could fail and lead to a NULL/error pointer dereference while configuring the jack. The patch fixes missing error handling to prevent dereferencing an error pointer, addressing an issue th...
CVE-2023-53662
In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4fnamesetupfilename,preparelookup If the filename casefolding fails, we'll be leaking memory from the fscryptname struct, namely from the 'cryptobuf.name' member. Make sure we free it in the error pat...
CVE-2023-53662
In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4fnamesetupfilename,preparelookup If the filename casefolding fails, we'll be leaking memory from the fscryptname struct, namely from the 'cryptobuf.name' member. Make sure we free it in the error pat...
EUVD-2025-32769
In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4fnamesetupfilename,preparelookup If the filename casefolding fails, we'll be leaking memory from the fscryptname struct, namely from the 'cryptobuf.name' member. Make sure we free it in the error pat...
CVE-2022-50510
CVE-2022-50510 affects the Linux kernel’s perf/smmuv3 component. The issue is a hotplug callback leak in arm_smmu_pmu_init(): when platform_driver_register() fails, the callback added by cpuhp_setup_state_multi() is not removed, potentially leaking a hotplug callback. The fix removes the callback...
EUVD-2021-14182
Malware in sbrugna...