CVE-2026-23966 sm-crypto Affected by Private Key Recovery in SM2-PKE

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decryption interface multiple times, an attacker can...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37967)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37967 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix...

CVE-2026-24024

creationtimestamp| type| source ---|---|--- 2026-01-21 07:08:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4fhsuhx2j...

CVE-2025-62886

creationtimestamp| type| source ---|---|--- 2026-01-20 20:07:50+00:00| seen| Telegram/P1uLfoUJxzTzQCvMFAXHUFrbUBHL7GnKYe-8Lxg9WQFXDnE...

CVE-2025-9282

creationtimestamp| type| source ---|---|--- 2026-01-20 15:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcujkrxz5w2j 2026-01-29 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-02...

CVE-2025-14533 Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to the 'insertuser' function not restricting the roles with which a user can register. This makes it possible for unauthenticated attackers to...

AlmaLinux 9 : podman (ALSA-2026:0470)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:0470 advisory. golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSHAGENTSUCCESS CVE-2025-47913 Tenable has extracted the preceding...

CVE-2025-5102

creationtimestamp| type| source ---|---|--- 2026-01-17 01:20:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclh4inw6e2y...

CVE-2025-24531

In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.16.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CVE-2026-22916

creationtimestamp| type| source ---|---|--- 2026-01-15 14:28:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mchs6u4i5h2x 2026-01-15 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115899757567671679...

CVE-2026-0712

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-68966

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-71165

creationtimestamp| type| source ---|---|--- 2026-01-14 20:23:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfvktup7u22...

CVE-2025-68967

creationtimestamp| type| source ---|---|--- 2026-01-14 05:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcedvtpkbo2c...

CVE-2025-68958

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

Debian dla-4438 : libbson-1.0-0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4438 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4438-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-20952 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2025-71025

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

CVE-2014-4033

Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...