Lucene search
+L

33902 matches found

Packet Storm News
Packet Storm News
added 2025/09/05 12:00 a.m.12 views

Wapiti Web Application Vulnerability Scanner 3.2.5

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2025/09/05 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the platform/x86/amd/hsmp module not checking if sock-metrictbladdr is NULL, which could result in a null...

5.5CVSS6.3AI score0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-33999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The referrer URL used by MFA required additional sanitizing, rather than being used directly. CVE-2024-33999 Note that Nessus relies on the presence of the...

9.8CVSS8.1AI score0.00541EPSS
SaveExploits0References2
Circl
Circl
added 2025/09/04 9:39 p.m.33 views

CVE-2025-48549

creationtimestamp| type| source ---|---|--- 2025-09-04 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly24buk43e2d...

7.8CVSS5.9AI score0.00112EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/04 6:23 p.m.10 views

CVE-2025-57776

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

8.5CVSS7.8AI score0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/04 3:33 p.m.69 views

CVE-2025-38728

Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.

9.1CVSS5.8AI score0.00312EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/04 3:33 p.m.7 views

CVE-2025-38728 smb3: fix for slab out of bounds on mount to ksmbd

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

9.1CVSS6AI score
SaveExploits0References11
Cvelist
Cvelist
added 2025/09/04 3:32 p.m.23 views

CVE-2025-38688 iommufd: Prevent ALIGN() overflow

In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONGMAX then the ALIGN can wrap resulting in a corrupted iova. Open code the ALIGN using...

8.8CVSS0.00164EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/04 3:32 p.m.59 views

CVE-2025-38688

CVE-2025-38688: In the Linux kernel’s iommufd code, ALIGN() overflow could occur while allocating IOVA ranges near ULONG_MAX, risking overlapping mappings or mapping against reserved ranges. The fix uses get_add_overflow() to guard ALIGN() and consolidates the checks under a single helper. Public...

8.8CVSS6.1AI score0.00164EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2025/09/04 11:09 a.m.24 views

CVE-2025-41039 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigadminlandingpage', 'datasconfigcurrency', 'datasconfigdbversion', 'datasconfigdefaultpagination',...

5.1CVSS0.00174EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 9:14 a.m.10 views

kasan: avoid sleepable page allocation from atomic context

...

5.5CVSS6.8AI score0.00148EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 7:31 a.m.2 views

RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

...

7.8CVSS7.4AI score0.00182EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 6:29 a.m.10 views

net: appletalk: Fix use-after-free in AARP proxy probe

...

7.8CVSS7AI score0.00167EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 5:45 a.m.7 views

iommufd: Fix protection fault in iommufd_test_syz_conv_iova

...

5.5CVSS7AI score0.00227EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 4:29 a.m.10 views

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

...

4.8CVSS7AI score0.00273EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2025/09/04 3:22 a.m.13 views

soc: qcom: pdr: protect locator_addr with the main mutex

...

5.5CVSS7AI score0.00165EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:58 a.m.10 views

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

...

9.8CVSS7AI score0.02173EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:49 a.m.11 views

sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

...

5.5CVSS7AI score0.00213EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:35 a.m.8 views

It was found that Lynx doesn't parse the authority component of the URL correctly

...

7.5CVSS7AI score0.01987EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 1:35 a.m.12 views

LoongArch: Set hugetlb mmap base address aligned with pmd size

...

7.8CVSS7AI score0.0018EPSS
SaveExploits0
Rows per page
Query Builder