CVE-2024-44843

CVE-2024-44843 affects SteVe v3.7.1. The issue is in the WebSocket handshake process, enabling an attacker to bypass authentication and deliver crafted OCPP requests to execute arbitrary commands. Documented impact includes authentication bypass and potential command execution on the affected ser...

CVE-2025-32428 Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...

CVE-2025-32428 Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...

CVE-2025-32428

CVE-2025-32428 : The issue affects the project jupyter-remote-desktop-proxy . When configured to use TigerVNC, the VNC server started by the proxy could be accessed over the network, rather than only via a UNIX socket (as intended since 3.0.0). This exposed remote ports and potentially allowed ne...

The vulnerability of the sco_sock_connect() function in the net/bluetooth/sco.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the scosockconnect function in the net/bluetooth/sco.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2025-25831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically with the espintcp component, where a few error paths are missing a kfree skb, leading to skb leaks. Recommendations At the moment,...

The vulnerability of the p9_socket_open() function in the net/9p/trans_fd.c module of the 9P protocol implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the p9socketopen function in the net/9p/transfd.c module of the 9P protocol implementation in the Linux operating system is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux Bluetooth subsystem allows a hacker to cause a service failure.

The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

TigerVNC accessible via the network and not just via a UNIX socket as intended

Summary jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still accessible via the network. This vulnerability does not affect users having...

GHSA-VRQ4-9HC3-CGP7 TigerVNC accessible via the network and not just via a UNIX socket as intended

Summary jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still accessible via the network. This vulnerability does not affect users having...

PT-2025-18470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the net: mctp module, where the bind lookup runs under RCU Read-Copy Update. To prevent a socket from being...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1359)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: fix data-races around sk-skforwardallocCVE-2024-53124 nvme-multipath: defer partition scanningCVE-2024-53093 bpf: synclinkedregs must preserv...

vsock: Keep the binding until socket destruction

...

af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.

...

ibmvnic: Don't reference skb after sending to VIOS

...

ndisc: use RCU protection in ndisc_alloc_skb()

...

bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

...

can: ctucanfd: handle skb allocation failure

...

PT-2025-27684

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference leak issue has been identified in the Linux kernel, specifically in the espintcp component. The current caching scheme for the encap socket can lead to reference leaks when...

PT-2025-18397

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A null pointer dereference issue has been identified in the Linux kernel. The problem occurs when the CIFS module is unloaded while a TCP socket is still alive, causing a discrepancy...