CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26419

A logic error in the initPhoneSwitch function of SystemSettingsFragment.java within the System component of Wear OS enables a potential Factory Reset Protection (FRP) bypass . This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges. Explo...

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

net: dsa: b53: do not enable EEE on bcm63xx

...

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

...

mlxsw: spectrum: Guard against invalid local ports

...

sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

...

CVE-2025-56752

A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...

PT-2025-35817

Name of the Vulnerable Software and Affected Versions: Ruijie RG-ES series switch firmware version ESW 1.01B1P39 Description: A vulnerability in the Ruijie RG-ES series switch firmware enables remote attackers to bypass authentication mechanisms, granting them unrestricted access to modify...

CVE-2025-56752: Improper Authentication

A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...

The vulnerability of RUGGEDCOM ROS Ethernet switch microprogramming software, related to insufficient handling of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-38657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: mcc: prevent shift wrapping in rtw89coremlsrswitch The linkid value comes from...

CVE-2025-9747 Koillection csrf_protection_controller.js cross-site request forgery

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controllers/csrfprotectioncontroller.js. Such manipulation leads to cross-site request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may ...

USN-7703-4 linux-gke, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

Linux Distros Unpatched Vulnerability : CVE-2022-39283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data...

Linux Distros Unpatched Vulnerability : CVE-2021-20267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance...

CVE-2025-9357

CVE-2025-9357 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 routers (firmware versions 1.0.013.001, 1.0.04.001, 1.0.04.002, 1.1.05.003, 1.2.07.001). The vulnerability lies in the function langSwitchByBBS in the file /goform/langSwitchByBBS where manipulating the argument langSelection...

CVE-2025-48978

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.11.0 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network. Affected Products: EdgeMAX EdgeSwitch Version 1.11.0 and earlier Mitigation: Update the EdgeMAX EdgeSwitch to Version 1.11...