CVE-2025-3651 Command Injection in iManage Work Desktop for Mac's Agent Service

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33...

CVE-2025-3651 Command Injection in iManage Work Desktop for Mac's Agent Service

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33...

PT-2025-16980 · Unknown · Work Desktop For Mac

Name of the Vulnerable Software and Affected Versions: Work Desktop for Mac versions 10.8.1.46 and earlier Description: The issue is related to improper verification of the source of a communication channel, allowing attackers to execute arbitrary commands via unauthorized access to the Agent...

iManage Work Desktop for Mac security vulnerabilities

iManage Work Desktop for Mac is an application from iManage, Inc. A security vulnerability exists in iManage Work Desktop for Mac versions 10.8.1.46 and earlier, which stems from improper authentication of the source of a communication channel and could result in the execution of arbitrary comman...

CVE-2025-3651: Origin Validation Error

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33...

DEBIAN-CVE-2025-23133

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the following steps: 1. update new channel list to cfg80211 and queue regwork. ...

DEBIAN-CVE-2025-22119

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: init wiphywork before allocating rfkill fails syzbort reported a uninitialize wiphyworklock in cfg80211devfree. 1 After rfkill allocation fails, the wiphy release process will be performed, which will cause...

Agent Zero path traversal vulnerability

Agent Zero is an artificial intelligence framework by the individual developer Jan Tomášek. A path traversal vulnerability exists in Agent Zero version 0.8.1.2, which stems from improper manipulation of the parameter path in the file /getworkdirfiles, which could lead to a path traversal attack...

Linux Distros Unpatched Vulnerability : CVE-2025-22014

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to...

acct: perform last write from workqueue

...

USB: gadget: f_midi: f_midi_complete to call queue_work

...

SUSE CVE-2025-22014

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

PT-2025-27723

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue can be triggered in the Linux kernel by forcing rescan work func to take a long time and utilizing a pwrctrl driver that may be unloaded. This is resolved by...

AZL-59907 CVE-2025-22014 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

DEBIAN-CVE-2025-22014

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

AZL-59772 CVE-2025-22014 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

UBUNTU-CVE-2025-22014

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

CVE-2025-22014 soc: qcom: pdr: Fix the potential deadlock

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

PT-2025-18428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang can occur while freeing a sigtrap event in the Linux kernel's perf subsystem if a related deferred signal hadn't been sent before the file got closed. This issue arises due to a...

SUSE CVE-2025-21967

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdfreeworkstruct -interimentry of ksmbdwork could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock brea...