BELL-CVE-2025-38099

Bulletin has no description...

CVE-2025-34087 Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web interface, the domain parameter is not properly sanitized, allowing an attacker to append OS commands to the domain string. These commands are executed on the...

CVE-2025-53500

creationtimestamp| type| source ---|---|--- 2025-07-03 19:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3h26xnkv2p...

CVE-2025-53501

creationtimestamp| type| source ---|---|--- 2025-07-03 19:15:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3gthzcnh2r...

CVE-2025-38151

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cmaneteventcallback fails to queuework The cited commit fixed a crash when cmaneteventcallback was called for a cmaid while work on that id from a previous call had not yet started. The work item was...

CVE-2025-38120

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapoavx2: fix initial map fill If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map. The early fix was incomplete and...

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-50258

creationtimestamp| type| source ---|---|--- 2025-07-03 15:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt32y6nbdf2r...

CVE-2025-40723

creationtimestamp| type| source ---|---|--- 2025-07-03 15:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt32gbpw262m...

CVE-2025-50262

creationtimestamp| type| source ---|---|--- 2025-07-03 15:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2yr7gnil2v...

CVE-2025-38113

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2024-25176

creationtimestamp| type| source ---|---|--- 2025-07-03 11:28:59+00:00| seen| https://gist.github.com/pwnhacker0x18/cd75d01fc7c9b6c85c183fbe5353d276 2025-07-18 15:00:45+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luaplxklt224...

CVE-2025-38161

creationtimestamp| type| source ---|---|--- 2025-07-03 11:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2lrnfobi2i 2025-07-03 20:36:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114791217215546777 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-38166

creationtimestamp| type| source ---|---|--- 2025-07-03 11:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2lniz7ev2r 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-38167

creationtimestamp| type| source ---|---|--- 2025-07-03 11:01:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2l7kdkaa2k...

CVE-2025-38146

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck...

CVE-2025-38111

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

CVE-2025-38160

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypiclkregister devmkasprintf returns NULL when memory allocation fails. Currently, raspberrypiclkregister does not check for this case, which results in a NULL pointer dereference. Add NUL...

CVE-2025-38111

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...