CVE-2025-37816

In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid countedby use gcc 15 honors the countedbylen attribute on vsctppacket.buf and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it...

CVE-2025-46802

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session...

CVE-2025-37827

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch There was a bug report about a NULL pointer dereference in btrfsaddfreespacezoned that ultimately happens because a conversion from the default metadata profile...

CVE-2025-35939

creationtimestamp| type| source ---|---|--- 2025-05-07 23:23:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15462 2025-05-07 23:30:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcu27baz2 2025-05-08...

CVE-2025-41399

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15453 2025-05-08 00:27:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnonzw4r2n 2025-05-08 00:52:39+00:00| seen| https://t.me/cvedetector/24767...

CVE-2025-46265

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15449 2025-05-08 00:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnooatll2h 2025-05-08 00:52:36+00:00| seen| https://t.me/cvedetector/24763 2025-05-08...

CVE-2025-35995

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15444 2025-05-07 23:30:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcyqinak2 2025-05-08 00:27:12+00:00| seen|...

CVE-2025-46265

On F5OS, an improper authorization vulnerability exists where remotely authenticated users LDAP, RADIUS, TACACS+ may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-46826

insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information name and number. However, the issue posed minimal risk, was never exploited, and had limited...

CVE-2025-41414

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-35995

When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of...

CVE-2025-36525

When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-31644 Appliance mode BIG-IP iControl REST and tmsh vulnerability

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell tmsh command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacke...

CVE-2025-41433

CVE-2025-41433 affects F5 BIG-IP SIP MRF ALG profile. When configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, enabling a potential DoS. Affected product scope per vendor advisories includes BIG-IP (all modules) acr...

CVE-2025-36504

CVE-2025-36504 affects BIG-IP when an HTTP/2 httprouter profile is configured on a virtual server. The issue can cause undisclosed responses that lead to increased memory/resource utilization, potentially degrading performance and causing DoS-like impact on the BIG-IP system. Security advisory K0...

CVE-2025-47462

creationtimestamp| type| source ---|---|--- 2025-05-07 21:39:09+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lomec4lyv72q...

CVE-2025-31177

gnuplot is affected by a heap buffer overflow at function utf8copyone...

CVE-2025-47649

creationtimestamp| type| source ---|---|--- 2025-05-07 19:47:32+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lom62jd2tx2x...

CVE-2025-30147

creationtimestamp| type| source ---|---|--- 2025-05-07 19:22:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15400 2025-05-07 21:26:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomdjezslkp2 2025-05-07...

CVE-2025-3272

creationtimestamp| type| source ---|---|--- 2025-05-07 19:22:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15394 2025-05-07 21:25:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomdj76xgzv2 2025-05-07 22:27:09+00:00| seen|...