Lucene search
+L

1231 matches found

OSV
OSV
added 2025/12/13 4:16 p.m.9 views

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

9.8CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/13 8:16 a.m.5 views

CVE-2025-36753 SWD Interface Open on Growatt ShineLan-X

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

8.6CVSS6.5AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/13 8:16 a.m.29 views

CVE-2025-36753

The CVE-2025-36753 entry concerns the Growatt ShineLan-X dongle with the SWD debug interface enabled by default. The exposed SWD interface allows an attacker to gain debug access and potentially extract secrets or domains from the device. The root cause is the default-access SWD debug interface; ...

9.8CVSS6.5AI score0.00285EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.7 views

Growatt ShineLan-X 安全漏洞

Growatt ShineLan-X is a data logger for PV inverters from Growatt China. A security vulnerability exists in Growatt ShineLan-X, which stems from the SWD debugging interface enabled by default and could lead to the extraction of device secrets or domains...

9.8CVSS6.6AI score0.00285EPSS
SaveExploits0References2
Circl
Circl
added 2025/12/11 3:0 p.m.18 views

CVE-2025-64516

creationtimestamp| type| source ---|---|--- 2025-12-11 15:00:08+00:00| published-proof-of-concept| Telegram/OT2YMFttNhOngNbGDW1w8vyWVYwNIlmQ9eo4yRleT-SWEp8 2026-01-15 16:50:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci25efs442v 2026-01-16 15:50:12+00:00| seen|...

7.5CVSS4.8AI score0.00277EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/12/09 3:31 a.m.12 views

EUVD-2023-60122

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: dwhdmi: fix connector access for scdc Commit 5d844091f237 "drm/scdc-helper: Pimp SCDC debugs" changed the scdc interface to pick up an i2c adapter from a connector instead. However, in the case of dw-hdmi, the wrong...

5.9AI score0.00182EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/09 1:29 a.m.23 views

CVE-2023-53834

CVE-2023-53834: In the Linux kernel, the iio: adc: ina2xx driver could NULL-deref during OF device match when a device-Tree used a compatible chain like ti,ina232, ti,ina231. The fix uses the already populated type variable and adds a generic name to ina2xx_config to ensure proper board-info popu...

6AI score0.00241EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/09 12:0 a.m.16 views

CVE-2023-53784

Summary: CVE-2023-53784 affects the Linux kernel’s DRM/DW-HDMI path. A change to the scdc interface (via commit 5d844091f237) caused the i2c adapter to be sourced from the wrong connector for DW-HDMI, leading to a NULL pointer dereference during bridge enablement. Root cause: dw-hdmi’s embedded c...

6AI score0.00182EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/12/02 12:35 a.m.13 views

Keycloak has debug default bind address

A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...

6.8CVSS7.9AI score0.00399EPSS
SaveExploits0References7Affected Software1
The Hacker News
The Hacker News
added 2025/11/15 10:21 a.m.13 views

Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies

The U.S. Department of Justice DoJ on Friday announced that five individuals have pleaded guilty to assisting North Korea's illicit revenue generation schemes by enabling information technology IT worker fraud in violation of international sanctions. The five individuals are listed below - Audric...

6.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.11 views

PT-2026-2509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to an off-by-one error in the validation of the wire order variable. The initial validation check, wire orderi ARRAY SIZEconfig pins, permitted...

6.2CVSS5.4AI score0.00173EPSS
SaveExploits0
OSV
OSV
added 2025/11/13 6:31 p.m.22 views

GHSA-7M9G-PMXF-M9M8 Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-j4vq-q93m-4683. This link is maintained to preserve external references. Original Description A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to...

6.8CVSS6.4AI score
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2025/11/13 6:31 p.m.29 views

Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-j4vq-q93m-4683. This link is maintained to preserve external references. Original Description A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to...

6.8CVSS7.5AI score0.00399EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2025/11/13 5:15 p.m.50 views

CVE-2025-11538

A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...

6.8CVSS0.00399EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/11/13 4:47 p.m.4 views

CVE-2025-11538 Keycloak-server: debug default bind address

A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...

6.8CVSS7.5AI score0.00399EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.22 views

PT-2025-46862

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A security issue exists in Keycloak where enabling debug mode with the --debug flag insecurely binds the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes th...

6.8CVSS6.5AI score0.00399EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.3 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989921 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic...

5.5CVSS6AI score0.0024EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/20 3:26 p.m.18 views

CVE-2025-40011 drm/gma500: Fix null dereference in hdmi teardown

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pcisetdrvdata sets the value of pdev-driverdata to NULL, after which the driverdata obtained from the same dev is dereferenced in oaktrailhdmii2cexit, and the i2cdev is extracted...

0.00241EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-50548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: i2c: hi846: Fix memory leak in hi846parsedt If any of the checks related to the...

5.5CVSS5.3AI score0.00184EPSS
SaveExploits0References2
HackRead
HackRead
added 2025/10/09 12:10 p.m.7 views

Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

Newark, United States, 9th October 2025, CyberNewsWire...

7AI score
SaveExploits0
Rows per page
Query Builder