CVE-2025-46611

Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2025-43560

creationtimestamp| type| source ---|---|--- 2025-05-14 00:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3pejcf6g2n 2025-05-15 04:32:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16446...

CVE-2025-43562

creationtimestamp| type| source ---|---|--- 2025-05-14 00:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3peijzsi2o 2025-05-15 04:32:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16444...

CVE-2025-43566

creationtimestamp| type| source ---|---|--- 2025-05-14 00:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3peing372e...

CVE-2025-29690

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.java...

CVE-2025-4664

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2024-57096

An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...

CVE-2024-56427

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the...

CVE-2025-32363

mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data...

GLSA-202505-09 : Atop: Heap Corruption

The remote host is affected by the vulnerability described in GLSA-202505-09 Atop: Heap Corruption A vulnerability has been discovered in Atop. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

CVE-2025-29691

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the userName parameter at /login/LoginsController.java...

Tracker miners: Sandbox weakness

Background The Tracker miners are a collection of data extractors for the GNOME Tracker. Description A vulnerability has been discovered in Tracker minders. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier for details. Workaround...

CVE-2025-32363

mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data...

CVE-2025-26784

The CVE-2025-26784 entry concerns NAS in Samsung Exynos (multiple SoCs) where a missing length check enables out-of-bounds writes. Connected Android Pixel bulletin confirms an RCE issue under Modem with High severity and notes a patch path via Pixel updates to the 2025-08-05 patch level; no explo...

CVE-2025-4574

creationtimestamp| type| source ---|---|--- 2025-05-13 22:30:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16259 2025-05-13 22:59:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3kjfd57wh2 2026-06-27...

CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

CVE-2025-26646

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

CVE-2025-26646

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...