KDE Connect 安全漏洞

KDE Connect is a software from the KDE community that connects cell phones and computers. A security vulnerability exists in versions of KDE Connect prior to 2025-11-28 that stems from an unassociated device ID and could affect KDE Connect clients on multiple platforms...

CVE-2025-13683

creationtimestamp| type| source ---|---|--- 2025-11-28 18:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6pja42fen2u...

CVE-2025-12638

creationtimestamp| type| source ---|---|--- 2025-11-28 17:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6pfuqrnmz2b...

CVE-2025-59790

creationtimestamp| type| source ---|---|--- 2025-11-28 13:30:20+00:00| seen| https://seclists.org/oss-sec/2025/q4/216 2025-11-28 14:54:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6p5bm4dt327 2025-11-28 15:27:39+00:00| seen|...

CVE-2025-13768

creationtimestamp| type| source ---|---|--- 2025-11-28 11:09:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6oqoi2lvt2k...

CVE-2025-66385

creationtimestamp| type| source ---|---|--- 2025-11-28 08:33:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115626398144315351 2025-11-28 09:29:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ol3jcsly2a...

CVE-2025-58311

creationtimestamp| type| source ---|---|--- 2025-11-28 06:54:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ocg4g3hz26...

CVE-2025-40146

creationtimestamp| type| source ---|---|--- 2025-11-28 05:27:05+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m6o5knijxd2c 2025-11-28 07:23:22+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m6oe2m2whr22 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-66360

creationtimestamp| type| source ---|---|--- 2025-11-28 04:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6o2cmg7v52k...

CVE-2025-66270

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49...

CVE-2025-66030

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be...