14014 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414412)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414412 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc and lack of free after allocation in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987022)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987022 advisory. In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid WARNON timing related checks The soft/batadv interface for a queued OGM can be...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987007)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987007 advisory. In the Linux kernel, the following vulnerability has been resolved: xtensa: Fix refcount leak bug in time.c In calibrateccount, offindcompatiblenode will return a no...
Improper Neutralization of Null Byte or NUL Character
Overview Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the handling of URIs in ssh://. An attacker can inject shell expressions into command-line constructor by supplying URIs containing \0 characters. This is only exploitable if URI...
CVE-2025-11323
A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...
EUVD-2025-32493
A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...
📄 GaatiTrack 1.0 SQL Injection
GaatiTrack version 1.0 suffers from multiple remote SQL injection vulnerabilities. Metasploit module included. Titles: GaatiTrack-1.0 Copyright©2025-Multiple-SQLi - Metasploit module Author: nu11secur1ty Date: 10/06/2025 Vendor: https://www.mayurik.com/ Software:...
BIT-MONGODB-2025-6712 MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation
MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory...
CVE-2025-11305 UTT HiPER 840G formTaskEdit strcpy buffer overflow
A vulnerability has been found in UTT HiPER 840G up to 3.1.1-190328. Affected by this issue is the function strcpy of the file /goform/formTaskEdit. The manipulation of the argument txtMin2 leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to...
CVE-2023-53591 net/mlx5e: Fix deadlock in tc route query code
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix deadlock in tc route query code Cited commit causes ABBA deadlock0 when peer flows are created while holding the devcom rw semaphore. Due to peer flows offload implementation the lock is taken much higher up the ca...
CVE-2023-53582
Concrete details found: CVE-2023-53582 affects the Linux kernel’s brcmfmac wifi driver. The issue is a stack-out-of-bounds read that occurs when a CLM version string, filled via memcpy() in brcmf_fil_iovar_data_get(), is passed as an argument to strreplace() in brcmf_c_preinit_dcmds() without bei...
CVE-2022-50481 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in cxlregisterafu|adapter, the device is not added, deviceunregister can not be called in the error path, otherwise it will cause a null-ptr-dere...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to use ofnodeput to free node references, which could lead to a reference count leak...
PT-2025-40631
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the sma1307 setting loaded function within the ASoC codec for the sma1307 device. The issue stems from an incorrect memory allocation size for the...
PT-2025-40754
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc3+ Description The Linux kernel contained a deadlock issue within the net/mlx5e module, specifically in the tc route query code. The issue stemmed from an ABBA deadlock occurring when peer flows were...
EUVD-2025-26773
Malicious code in bioql PyPI...
EUVD-2025-4901
Malicious code in bioql PyPI...
EUVD-2024-54618
Malicious code in bioql PyPI...