CVE-2023-54192 f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null pointer panic in tracepoint in replaceatomicwriteblock We got a kernel panic if oldaddr is NULL. https://bugzilla.kernel.org/showbug.cgi?id=217266 BUG: kernel NULL pointer dereference, address: 0000000000000000 Cal...

OESA-2025-2855 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled...

OESA-2025-2858 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled...

OESA-2025-2854 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992166)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992166 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference...

PT-2025-53851

Name of the Vulnerable Software and Affected Versions Tenda M3 version 1.0.0.134903 Description A flaw exists in the formSetAdPushInfo function within the /goform/setAdPushInfo file. Manipulation of the mac/terminal argument can lead to a stack-based buffer overflow. This issue is potentially...

Ksenia Security Lares 4.0 Home Automation: Input validation error vulnerability

Ksenia Security Lares 4.0 Home Automation is a smart security and home automation control platform from Ksenia Security, Italy. An input validation error vulnerability exists in Ksenia Security Lares 4.0 Home Automation version 1.6, which stems from the manipulation of the redirectPage GET...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992659)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992659 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992473 advisory. In the Linux kernel, the following vulnerability has been resolved: md: call mdstopwrites in mdstop From the link 1, we can see raid1d was running even after the pat...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992494 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double free on tx path. We see kernel crashes and lockups and KASAN error...

CVE-2025-15203

creationtimestamp| type| source ---|---|--- 2025-12-29 23:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5xtjjl442q...

MAL-2025-192961 Malicious code in awsutil (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86d4af9fafbcfb6e3789a38b426c744e4ac67da10eb1fa225be3a715189fb1c2 Dependency confusion research package with advanced module-mocking --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also...

CVE-2025-15154

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in unsigned char* std::__1::vector<unsigned char, std::__1::allocator<unsigned char

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6568594902417408 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in tsk_UTF16toUTF8

Detailed Report: https://oss-fuzz.com/testcase?key=6420711662223360 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x789c90ff8700 Crash State: tskUTF16toUTF...

CVE-2025-66861

creationtimestamp| type| source ---|---|--- 2025-12-29 16:43:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803855977149298 2025-12-29 18:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5hsyps3y2q 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-69206 Hemmelig has SSRF Filter bypass in Secret Request functionality

Hemmelig is a messing app with with client-side encryption and self-destructing messages. Prior to version 7.3.3, a Server-Side Request Forgery SSRF filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature. The application attempts to block internal/private ...

CVE-2025-69206 Hemmelig has SSRF Filter bypass in Secret Request functionality

Hemmelig is a messing app with with client-side encryption and self-destructing messages. Prior to version 7.3.3, a Server-Side Request Forgery SSRF filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature. The application attempts to block internal/private ...

CVE-2025-15192

A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub415328 of the file /boafrm/formLtefotaUpgradeQuectel. Such manipulation of the argument fotaurl leads to command injection. The attack can be executed remotely. The exploit has been...

CVE-2025-15118

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has...