5661 matches found
CVE-2025-50505
Clash Verge Rev (versions through 2.2.3 ) is vulnerable to Local Privilege Escalation (LPE) and Remote Code Execution (RCE) due to an unauthenticated HTTP API endpoint (/start_clash) in the clash-verge-service component. The service, which runs with elevated privileges (root or SYSTEM), allows at...
CVE-2023-6215: Missing Authentication for Critical Function
A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414428)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414428 advisory. mcbausbstartxmit in drivers/net/can/usb/mcbausb.c in the Linux kernel through 5.17.1 has a double free. Tenable has extracted the preceding description block directl...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414391)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414391 advisory. The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or...
CVE-2025-11302
A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of the argument pinCode leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...
CVE-2025-59729
When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...
PT-2025-40875
Name of the Vulnerable Software and Affected Versions versions prior to 8.0 Description An integer underflow occurs in the offset calculation during DHAV file header parsing, potentially leading to reading the duration from before the start of the allocated buffer. Specifically, when processing a...
CVE-2025-11302
A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of the argument pinCode leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...
Belkin F9K1015 安全漏洞
Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from incorrect manipulation of the parameter pinCode in the file /goform/formWpsStart, which could result in a buffer overflow...
CVE-2022-50486
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sure the call...
UBUNTU-CVE-2023-53601
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
CVE-2023-53601 bonding: do not assume skb mac_header is set
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
CVE-2023-53583
CVE-2023-53583 concerns the Linux kernel RISC‑V PMU driver. The issue arises from the perf subsystem: after perf_event_overflow(), the RISC‑V PMU driver did not update PERF_HES_STOPPED, and the unthrottle path could trigger riscv_pmu_start(), emitting a WARN_ON_ONCE. The fixed change removes the ...
CVE-2023-53583 perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: Remove PERFHESSTOPPED flag checking in riscvpmustart Since commit 096b52fd2bb4 "perf: RISC-V: throttle perf events" the perfsampleeventtook function was added to report time spent in overflow interrupts. If the...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mismatch in the return type of the netcpndostartxmit function, which could lead to a kernel panic or threa...
PT-2025-40673
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the return type of the netcp ndo start xmit function does not match the expected return type in the struct net device ops. Specifically, ndo star...
PT-2025-40658
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The gntdev driver in the Linux kernel did not correctly handle scenarios involving paravirtualized PV Xen domains and Virtual Memory Area VMA splitting. Specifically, the issue occurred...
EUVD-2025-24919
Malicious code in bioql PyPI...