CVE-2025-53372 node-code-sandbox-mcp has a Sandbox Escape via Command Injection

node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP Server. The vulnerability is caused by the unsanitized use o...

CVE-2025-40711

creationtimestamp| type| source ---|---|--- 2025-07-08 13:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthgzhddpz2l...

CVE-2025-40712

creationtimestamp| type| source ---|---|--- 2025-07-08 13:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthft6rejm2b...

CVE-2025-40742

creationtimestamp| type| source ---|---|--- 2025-07-08 13:21:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthfegyd4a2f 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-06 2025-07-18 06:30:14+00:00| seen| https://t.me/icscert/1242...

CVE-2025-27057

creationtimestamp| type| source ---|---|--- 2025-07-08 13:19:01+00:00| seen| https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen|...

CVE-2025-27056

Memory corruption during sub-system restart while processing clean-up to free up resources...

CVE-2025-27050

Memory corruption while processing event close when client process terminates abruptly...

CVE-2025-21445

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host...

CVE-2025-27052 Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while processing data packets in diag received from Unix clients...

CVE-2025-21008

Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...

CVE-2025-20982

Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-21009

Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...

CVE-2025-21005

Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information...

CVE-2025-21005

The CVE-2025-21005 entry concerns the isemtelephony component, with the issue described as improper access control. Affected software isemtelephony is prior to Android 15, where local attackers could access sensitive information due to insufficient access restrictions. The PT Security advisory (P...

CVE-2025-21004

The CVE-2025-21004 entry concerns Galaxy Watch System UI where improper verification of intents in the broadcast receiver enables a local attacker to power off the device. Affected scope is Galaxy Watch devices running firmware prior to the SMR Jul-2025 Release 1. The underlying issue is insuffic...

CVE-2025-20999

The CVE-2025-20999 issue affects Samsung Galaxy Tablet devices (prior to SMR Jul-2025 Release 1) and is due to improper authorization when accessing saved Wi‑Fi passwords, enabling a secondary user to retrieve the owner’s credentials. The root cause is insufficient access control for saved Wi‑Fi ...

CVE-2025-20982

The issue (CVE-2025-20982) affects KnoxVault trustlet on Samsung devices, caused by an out-of-bounds write when setting the auth secret. It applies to KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 and enables local privileged attackers to write memory out-of-bounds. Mitigation: upda...

CVE-2025-50109

creationtimestamp| type| source ---|---|--- 2025-07-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 2025-07-08 20:03:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lti3tu3ut324...

CVE-2025-7169

creationtimestamp| type| source ---|---|--- 2025-07-08 09:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgycjr7g32e...

CVE-2025-38236

A use-after-free flaw was found in the Linux kernel's AFUNIX sockets functionality in how a user triggers the issue by sending and receiving a crafted sequence of OOB socket messages. This vulnerability allows a local attacker to escalate privileges, especially if the kernel address layout...