CVE-2025-49140 Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)

Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should...

CVE-2025-48888

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, deno run --allow-read --deny-read main.ts results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions give...

CVE-2025-41646

CVE-2025-41646 affects RevPi Webstatus (≤ v2.4.5). The authentication bypass is caused by an incorrect type conversion in the login mechanism, allowing an unauthenticated remote attacker to gain full device access. Connected documents identify RevPi Webstatus as vulnerable to improper type handli...

CVE-2025-5737

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-5694

creationtimestamp| type| source ---|---|--- 2025-06-06 00:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvmv5koor2e...

CVE-2025-46257

creationtimestamp| type| source ---|---|--- 2025-06-05 19:14:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquzpkyxqg2s...

CVE-2025-23098

creationtimestamp| type| source ---|---|--- 2025-06-03 21:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7swhphv25...

CVE-2025-21485

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

libsoup-2_4-1-2.74.3-11.1 on GA media (moderate)

libsoup-24-1-2.74.3-11.1 on GA media Announcement ID: openSUSE-SU-2025:15189-1 Rating: moderate Cross-References: CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32912 CVE-2025-32913 CVE-2025-4948 CVE-2025-4969 CVSS scores: CVE-2025-32906 SUSE : 8.2...

CVE-2025-37998

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in outputuserspace This patch replaces the manual Netlink attribute iteration in outputuserspace with nlaforeachnested, which ensures that only well-formed attributes are processed...

CVE-2025-33043 SMM buffer Integrity

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity...

CVE-2025-5270

No description is available for this CVE...

CVE-2025-41652

creationtimestamp| type| source ---|---|--- 2025-05-27 08:48:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17613 2025-05-27 09:07:03+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lq5dessbva62 2025-05-27 09:18:04+00:00| seen|...

CVE-2025-5203

A flaw was found in the Open Asset Import Library Assimp. This vulnerability allows an out-of-bounds read via local access...

CVE-2025-5201

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be...

CVE-2022-31812

creationtimestamp| type| source ---|---|--- 2025-05-23 17:23:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu5h6z6e22q 2025-05-23 17:47:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17447 2025-05-29 10:00:00+00:00| seen|...

CVE-2025-3580

creationtimestamp| type| source ---|---|--- 2025-05-23 14:46:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17393 2025-05-24 13:09:30+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lpw7qgrc6727 2025-05-24 14:34:27+00:00| seen|...

CVE-2024-47605

silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payloa...

CVE-2024-8934

A local user with administrative access rights can enter specialy crafted values for settings at the user interface UI of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed...

CVE-2023-42664

A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTT...