CVE-2022-50759

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5648: Free V4L2 fwnode data on unbind The V4L2 fwnode data structure doesn't get freed on unbind, which leads to a memleak...

CVE-2023-54066 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861i2cmasterxfer In gl861i2cmasterxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally...

CVE-2025-66444

creationtimestamp| type| source ---|---|--- 2025-12-24 05:45:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mapkp5z6hz2p 2025-12-24 07:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mappcdfirb2y...

CVE-2025-68664

creationtimestamp| type| source ---|---|--- 2025-12-23 23:44:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maowjvnaam2p 2025-12-24 01:35:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115771971926680769 2025-12-24 01:35:01+00:00| seen|...

CVE-2023-53951

creationtimestamp| type| source ---|---|--- 2025-12-21 22:18:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majqsyupih2p...

SUSE-SU-2025:4444-1 Security update 5.1.1.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client version 11.5.10 bsc1254113 CVE-2025-47911: Fixed parsing HTML documents version 11.5.10...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991281 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from th...

CVE-2025-68222

In the Linux kernel, the following vulnerability has been resolved: pinctrl: s32cc: fix uninitialized memory in s32pinctrldesc s32pinctrldesc is allocated with devmkmalloc, but not all of its fields are initialized. Notably, numcustomparams is used in pinconfgenericparsedtconfig, resulting in...

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

PT-2025-51202

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25 Description A buffer overflow weakness exists in the file /usr/sbin/http eshell server of the WIREDCFGGET Interface component. Manipulation of the params argument can trigger this issue, potentially allowing...

EUVD-2025-203255

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

CVE-2025-36753

The CVE-2025-36753 entry concerns the Growatt ShineLan-X dongle with the SWD debug interface enabled by default. The exposed SWD interface allows an attacker to gain debug access and potentially extract secrets or domains from the device. The root cause is the default-access SWD debug interface; ...

CVE-2025-36753 SWD Interface Open on Growatt ShineLan-X

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

Growatt ShineLan-X 安全漏洞

Growatt ShineLan-X is a data logger for PV inverters from Growatt China. A security vulnerability exists in Growatt ShineLan-X, which stems from the SWD debugging interface enabled by default and could lead to the extraction of device secrets or domains...

CVE-2025-64516

creationtimestamp| type| source ---|---|--- 2025-12-11 15:00:08+00:00| published-proof-of-concept| Telegram/OT2YMFttNhOngNbGDW1w8vyWVYwNIlmQ9eo4yRleT-SWEp8 2026-01-15 16:50:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mci25efs442v 2026-01-16 15:50:12+00:00| seen|...

EUVD-2023-60122

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: dwhdmi: fix connector access for scdc Commit 5d844091f237 "drm/scdc-helper: Pimp SCDC debugs" changed the scdc interface to pick up an i2c adapter from a connector instead. However, in the case of dw-hdmi, the wrong...

CVE-2023-53834

CVE-2023-53834: In the Linux kernel, the iio: adc: ina2xx driver could NULL-deref during OF device match when a device-Tree used a compatible chain like ti,ina232, ti,ina231. The fix uses the already populated type variable and adds a generic name to ina2xx_config to ensure proper board-info popu...

CVE-2023-53784

Summary: CVE-2023-53784 affects the Linux kernel’s DRM/DW-HDMI path. A change to the scdc interface (via commit 5d844091f237) caused the i2c adapter to be sourced from the wrong connector for DW-HDMI, leading to a NULL pointer dereference during bridge enablement. Root cause: dw-hdmi’s embedded c...

Keycloak has debug default bind address

A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...