2025

WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) is vulnerable to Broken Access Control in initial configu

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) admin password is stored in configuration file as plai

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of validation in the langGet parameter in

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration cha

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online

A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG f

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive informati

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the

CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administ

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by

Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo came

tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version 10.27

In the Linux kernel, the following vulnerability has been resolved: parisc: Avoid crash due to unaligned access in unwi

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navigating conf

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return val

In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause

In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for pro

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Avoid deadlock between PCI error recovery

In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The k

In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling o

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when r

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Prevent race in socket write i

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grab_requested_

In the Linux kernel, the following vulnerability has been resolved: afs: Fix delayed allocation of a cell's anonymous k

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_i

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in process_v2_sparse_read() for enc

In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when spl

In the Linux kernel, the following vulnerability has been resolved: mm/memfd: fix information leak in hugetlb folios W

In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_a

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure T

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap

In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dw

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: fix use-after-free in usb_gadget_

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk

In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size before write operati

In the Linux kernel, the following vulnerability has been resolved: crypto: zstd - fix double-free in per-CPU stream cl

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/

In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3

In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat io

In the Linux kernel, the following vulnerability has been resolved: mm: don't spin in add_stack_record when gfp flags d

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix dma_buf object leak in fastrpc_m

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpag