iwl_mvm_rx_session_protect_notif() DoS

Vulnerability of the iwlmvmrxsessionprotectnotif function in the drivers/net/wireless/intel/iwlwifi/mvm/time-event.c module – The Linux kernel’s wireless adapter support driver has a vulnerability due to incorrect checking of the return value of a function. Exploiting this vulnerability could all...

RHEL 9 : xorg-x11-server (RHSA-2025:22364)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22364 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

RHEL 9 : xorg-x11-server (RHSA-2025:22365)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22365 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

tegra DRM Host1x Buffer Overflow DoS

Vulnerability of the host1xdrmprobe function in the drivers/gpu/drm/tegra/drm.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a vulnerability related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause...

Intel Linux kernel ndev_initdebugfs() function

Vulnerability of the ndevinitdebugfs function in the drivers/ntb/hw/intel/ntbhwgen1.c module – The Linux kernel’s Intel support driver has a vulnerability related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause a system...

Linux file system support module UDF Directory Buffer Overflow DoS

The vulnerability of the udffiiterinit function in the fs/udf/directory.c module of the Linux file system support module is related to the lack of checking of the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20251203-16

A vulnerability in the Consul and Consul Enterprise service configuration tool is related to incorrect validation of the Content Length of the Content Length header. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service Vulnerability in the Consul an...

PT-2025-48980

Name of the Vulnerable Software and Affected Versions Envoy versions 1.33.12 through 1.36.2 Description Envoy’s mTLS certificate matcher for match typed subject alt names may incorrectly treat certificates containing an embedded null byte 0 inside an OTHERNAME SAN value as valid matches. This can...

📄 Microsoft Windows 11 Build 10.0.22631.6199 Registry Vulnerability Testing Tool

This is a C/C++ proof-of-concept PoC program designed to test for a specific vulnerability within the Windows Registry handling mechanism, often related to key duplication or improper permission checks during certain API calls like RegCopyTreeW...

CVE-2025-11788

Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowSupervisorParameters' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf'. The 'GetParametermeter' function retrieves the user input, which is directly...

graphicsmagick:coder_GIF_fuzzer: Use-of-uninitialized-value in WriteGIFImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4772969764421632 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderGIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Uncaught Exception

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Uncaught Exception via improper validation of the Supported parameter in the admin configuration panel. An attacker can cause the application ...

CVE-2025-54849

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

SROOT Component Code Execution

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark AI systems is related to an unvalidated return value, which leads to the dereferencing of a zero pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code, cause service failures, o...

ASB-A-352518318

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Socomec DIRIS Digiware M-70 Modbus TCP reboot denial of service vulnerability

Talos Vulnerability Report TALOS-2024-2119 Socomec DIRIS Digiware M-70 Modbus TCP reboot denial of service vulnerability December 1, 2025 CVE Number CVE-2024-48882 SUMMARY A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially...

RHEL 8 : xorg-x11-server (RHSA-2025:22426)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22426 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

RHEL 8 : xorg-x11-server (RHSA-2025:22427)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22427 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

OSV-2025-955 Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464323256 Crash type: Use-of-uninitialized-value Crash state: decodercontext::constructreferencepicturelists decodercontext::processslicesegmentheader decodercontext::readsliceNAL...

PT-2025-54616

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464323256 Crash type: Use-of-uninitialized-value Crash state: decoder context::construct reference picture lists decoder context::process slice segment header decoder context::read slice NAL...