CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and librcm.so binaries. The sub4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in NVRAM via nvramsafeset"dmzipaddr", .... These values are later...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

PT-2025-47551

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A flaw exists in Tenda AC21 version 16.03.08.16 related to a stack-based buffer overflow. The issue is located in the file /goform/SetSysTimeCfg. The timeZone/time argument can be manipulated to trigg...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

CVE-2025-10495

CVE-2025-10495 affects Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client apps. The descriptions indicate a potential code execution vulnerability that an attacker on the same logical network could trigger under certain conditions. Public details in the provided so...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

Lenovo多款产品 安全漏洞

Lenovo App Store and others are products of the Chinese company Lenovo Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser.ws and others are WebSockets open source products.ws is a Node.js WebSocket library.Lenovo PC Lenovo PC Manager is a PC management software. A securi...

CVE-2025-10495: Improper Certificate Validation

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

PT-2025-46690

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...

EulerOS 2.0 SP10 : bind (EulerOS-SA-2025-2378)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An...

The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm devices allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm devices is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

Security Bulletin: IBM i is affected by BIND accepting records with untrusted data, predictable port and query ID, and resource exhaustions in Domain Name System due to multiple vulnerabilities.

Summary Domain Name System for IBM i is vulnerable to BIND accepting records with forged data CVE-2025-40778, prediction of port and ID due to weakness in pseudo random number generator CVE-2025-40780, various resource exhaustions when being flooded with valid or invalid HTTP/2 traffic...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990197)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990197 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the pszkmsgread kasprintf returns a pointer to dynamical...