Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991145 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

CVE-2025-66626

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions 3.6.13 and below and versions 3.7.0 through 3.7.4, contain unsafe untar code that handles symbolic links in archives. Concretely, the computation of a link's target and the...

Security Bulletin: IBM Edge Data Collector uses django-4.2.24-py3-none-any.whl which is vulnerable to CVE-2025-59681, CVE-2025-59682.

Summary IBM Edge Data Collector uses django-4.2.24-py3-none-any.whl which is vulnerable to CVE-2025-59681, CVE-2025-59682. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-59681 DESCRIPTION: An issue was discovered in Django 4.2 before 4.2.25,...

kernel: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

A use after free exists in the wifi module of the linux kernel in the function brcmfnetdevstartxmit,thereby leading to damage to system availability and integrity...

CVE-2023-53866

CVE-2023-53866 - Linux kernel (ASoC: soc-compress) impact and fix Affected software: Linux kernel ASoC subsystem, specifically the soc-compress path used for DPCM (dynamic PCM) processing. Root cause: Functions such as dpcm_be_connect, dpcm_be_disconnect, snd_soc_runtime_action, and dpcm_dapm_str...

PT-2025-49744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a data race condition within the netlink subsystem. Specifically, both netlink recvmsg and netlink native seq show were reading nlk-cb running without proper...

CVE-2025-48588

In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-53766 FS: JFS: Check for read-only mounted filesystem in txBegin

In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Check for read-only mounted filesystem in txBegin This patch adds a check for read-only mounted filesystem in txBegin before starting a transaction potentially saving from NULL pointer deref...

The vulnerability of the rtl8150_start_xmit() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtl8150startxmit function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Exploit for CVE-2025-55182

React 19 & Next.js Security Fix Prompts for AI Agents 🚨 CRI...

Vulnerability of the md_start_sync() function in the drivers/md/md.c module – The Linux kernel’s device support driver for multiple devices (RAID and LVM), which allows a malicious attacker to trigger a service failure.

Vulnerability of the mdstartsync function in the drivers/md/md.c module – The Linux kernel’s support for multiple devices RAID and LVM is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2025-58481

Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service...

EUVD-2025-200007

Malicious code in start-internal npm...

Malicious code in start-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a0cd368d9612b95c373551c4e8e15faac47d990feaba41964d85e4eff4b09 The package start-internal was found to contain malicious code...

MAL-2025-191503 Malicious code in start-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a0cd368d9612b95c373551c4e8e15faac47d990feaba41964d85e4eff4b09 The package start-internal was found to contain malicious code...

ExploitForge

Getting Started with Create React App This project was bootst...

CVE-2025-9558

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

CVE-2025-9558

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

CVE-2025-9558 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

CVE-2025-9558

CVE-2025-9558 involves an out-of-bounds write in the Zephyr PB-ADV handling. The vulnerability occurs in gen_prov_start() within pb_adv.c, where the full length of received data is copied into link.rx.buf without validating the data size, potentially leading to memory corruption. Affected softwar...