Security Bulletin: Maximo AI Service Component: Spring Security Aspects may not correctly locate method security annotations on private methods.

Summary Security Bulletin: Maximo AI Service Component Component uses Spring Security Aspects may not correctly locate method security annotations on private methods.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-22233...

CVE-2025-52521

creationtimestamp| type| source ---|---|--- 2025-07-06 21:40:06+00:00| seen| https://bsky.app/profile/osanpo.bsky.social/post/3ltdaczrkck2s 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-585/...

CVE-2025-6786

creationtimestamp| type| source ---|---|--- 2025-07-04 07:25:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4pn3cgjw2r...

WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...

CVE-2025-38173

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for zero-length skcipher requests. Just return 0...

CVE-2025-27449

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:23+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 06:23:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2...

CVE-2025-45813

creationtimestamp| type| source ---|---|--- 2025-07-02 21:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz6j6moub2m...

Exploit for CVE-2025-6934

🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opa...

CVE-2025-6891

creationtimestamp| type| source ---|---|--- 2025-06-30 06:37:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lssl3i4jwq2b 2025-06-30 06:58:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19902 2025-06-30 10:48:57+00:00| seen|...

Security advisory: Recently reported incomplete cleanup issue in Qt's Schannel handling can impact Qt

There is a "Incomplete Cleanup" problem in Qt’s Schannel handling when it is used to provide a server handling incoming TLS connections. This has been assigned the CVE id CVE-2025-6338. Affected versions: This issue affects only the Schannel functionality on Windows if it is turned on in Qt 5.15...

CVE-2025-53107

creationtimestamp| type| source ---|---|--- 2025-06-29 11:39:32+00:00| published-proof-of-concept| https://github.com/cyanheads/git-mcp-server/security/advisories/GHSA-3q26-f695-pp76 2025-07-01 18:08:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20067 2025-07-01...

CVE-2025-53338

creationtimestamp| type| source ---|---|--- 2025-06-27 19:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmeav6zdo2m...

PT-2025-27340 · Undefined · Undefined

CVE-2013-1440 - CVE-2022-26237: Microsoft Windows DNS Server Remote Code Execution Vulnerability CVE ID : CVE-2013-1440 Published : June 26, 2025, 9:15 p.m. | 3 hours, 2 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity:...

[SECURITY] [DSA 5945-1] konsole security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5945-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 20, 2025 https://www.debian.org/security/faq -...

CVE-2025-49983 WordPress WPThumb plugin <= 0.10 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Joe Hoyle WPThumb wp-thumb allows Server Side Request Forgery.This issue affects WPThumb: from n/a through = 0.10...

Exploit for CVE-2025-6019

CVE-2025-6019: Privilege Escalation Exploit via UDisks2 Filesy...

CVE-2024-50562

creationtimestamp| type| source ---|---|--- 2025-06-20 07:23:32+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lrziyn2nql2b 2025-06-20 15:00:06+00:00| published-proof-of-concept| Telegram/WbkInEHYY3kOnUccLnofEqQY0zB0xloygQFKulDWXCJgOM4 2025-06-20 23:00:09+00:00|...

CVE-2022-50003

In the Linux kernel, the following vulnerability has been resolved: ice: xsk: prohibit usage of non-balanced queue id Fix the following scenario: 1. ethtool -L $IFACE rx 8 tx 96 2. xdpsock -q 10 -t -z Above refers to a case where user would like to attach XSK socket in txonly mode at a queue id...

PT-2025-26490 · Undefined · Undefined

CVE-2006-2192 - CVE-2022-0001: Cisco Webex Meeting Server Integer Overflow Vulnerability CVE ID : CVE-2006-2192 Published : June 19, 2025, 4:15 p.m. | 3 hours, 57 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | ...

PT-2025-26489 · Undefined · Undefined

CVE-2005-2347 - CVE-2022-1234: Apache Struts XML Entity Expansion XXE Vulnerability CVE ID : CVE-2005-2347 Published : June 19, 2025, 11:15 a.m. | 57 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the...