RockyLinux 10 : firefox (RLSA-2025:10073)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10073 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

CVE-2025-34226

creationtimestamp| type| source ---|---|--- 2025-10-05 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2hynlnqae2j...

CVE-2024-28157

creationtimestamp| type| source ---|---|--- 2025-10-05 21:00:12+00:00| published-proof-of-concept| Telegram/PhhScPJ8nIwc2vRijZXtfdgvBVI811MtSflqcGx0gK4a11w 2025-10-08 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk24w6ff23...

CVE-2023-31038

creationtimestamp| type| source ---|---|--- 2025-10-05 13:19:21+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2h6rbd2hs2d...

CVE-2023-53574

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtwcoredeinit', shrink critical section in the latter by freeing...

CVE-2023-53600

In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp error in response to a nonliner skb, we get BUG: KASAN: slab-out-of-bounds in ipcomputecsum+0x134/0x220 Read of size 4 at addr ffff88811c50db00 by...

CVE-2023-53601

In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...

CVE-2025-39939

creationtimestamp| type| source ---|---|--- 2025-10-04 09:49:33+00:00| seen| https://gist.github.com/Darkcrai86/0b5ea1dd40de85fb33f3fccec4011b78...

CVE-2025-39929

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown...

CVE-2025-59944

creationtimestamp| type| source ---|---|--- 2025-10-04 06:50:10+00:00| seen| https://bsky.app/profile/test001-05.bsky.social/post/3m2dykm6v5o2d 2025-10-13 07:13:56+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o3dcwqc2v...

CVE-2025-9243

creationtimestamp| type| source ---|---|--- 2025-10-04 04:34:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2dqxpsnpu2w 2026-04-08 23:31:42+00:00| seen| Telegram/9bO0-1binurVzp3pCY9TyWaRl8X3rBZNbLTO3pIar2J4QNM 2026-04-08 23:32:00+00:00| seen|...

CVE-2025-9952

creationtimestamp| type| source ---|---|--- 2025-10-04 04:04:06+00:00| seen| Telegram/6mcOlg1Tt6SjuFYMgZmDoegeyRgf7W0xOcai5vMfrC9-qH0...

CVE-2025-11227

creationtimestamp| type| source ---|---|--- 2025-10-04 03:02:48+00:00| seen| Telegram/XkTbt2kPtlyyTeU7BIdg6p2oMOzMy-EX8P5AZBsZPWGhU...

CVE-2025-10746

creationtimestamp| type| source ---|---|--- 2025-10-04 03:02:40+00:00| seen| Telegram/mfWNgfW-Td5e4VlL0luik9nel0UOOwsf0EPZiysXDizAFyk...

CVE-2025-9030

creationtimestamp| type| source ---|---|--- 2025-10-04 03:02:32+00:00| seen| Telegram/wx84Y75HflB66YbnuuP9RDP51sxPbAGqhMBCCX041SA1IY...

CVE-2025-9029

creationtimestamp| type| source ---|---|--- 2025-10-04 03:02:31+00:00| seen| Telegram/WxWRmDN8lHgeAdYDVROtau166XgjaPe4QPWes3ZRLlaMlE...

CVE-2025-10729

creationtimestamp| type| source ---|---|--- 2025-10-04 00:03:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2dbtxrddk2a 2025-10-07 05:15:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m2leongtgs2a 2025-10-08 07:00:08+00:00| seen|...

RockyLinux 10 : skopeo (RLSA-2025:9149)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9149 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly...

RockyLinux 10 : thunderbird (RLSA-2025:8196)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8196 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in...

RockyLinux 10 : gdk-pixbuf2 (RLSA-2025:12862)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12862 advisory. gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf CVE-2025-7345 Tenable has extracted the preceding description block directly from the RockyLinux security advisor...