EUVD-2025-205041

Not used...

EUVD-2025-205042

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploi...

Assessing the Software Security Comprehension of Large Language Models

Large language models LLMs are increasingly used in software development, but their level of software security expertise remains unclear. This work systematically evaluates the security comprehension of five leading LLMs: GPT-4o-Mini, GPT-5-Mini, Gemini-2.5-Flash, Llama-3.1, and Qwen-2.5, using...

CVE-2025-14933

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-66211

creationtimestamp| type| source ---|---|--- 2025-12-23 09:00:05+00:00| seen| Telegram/rCQyUNwNINgTtycBx-WAU6uHir2-K9YryZ3eKw6czKX6mA 2025-12-24 01:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3map3m6gar72x 2025-12-24 08:34:24+00:00| seen|...

EUVD-2025-204904

Malicious code in elf-stats-glittering-cookie-844 npm...

EUVD-2025-204945

Malicious code in alicenpmpackage npm...

PT-2025-53398

CVE-2023-5094 - Apache HTTP Server Denial of Service CVE ID : CVE-2023-5094 Published : Dec. 23, 2025, 2:16 p.m. | 42 minutes ago Description : Rejected reason: This CVE id was assigned to an issue which was later deemed not security relevant. Severity: 0.0 | NA Visit the link for more details,...

The ‘Epstein’s Suicide’ Video in the Latest DOJ Release Isn’t What It Seems

Here’s how a fake clip from 2019 wound up in the latest Justice Department Epstein files dump...

EUVD-2025-204727

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via uploading a crafted XML file...

EUVD-2025-204726

In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer When a UAS device is unplugged during data transfer, there is a probability of a system panic occurring. The root cause is an access to ...

EUVD-2025-204326

A Reflected Cross-Site Scripting XSS vulnerability in yohanawi Hotel Management System commit 87e004a allows a remote attacker to execute arbitrary web script via the 'error' parameter in pages/room.php...

EUVD-2025-204330

The vulnerability affects Ignition SCADA applications where Python scripting is utilized for automation purposes. The vulnerability arises from the absence of proper security controls that restrict which Python libraries can be imported and executed within the scripting environment. The core issu...

EUVD-2025-204285

There is an out of bounds write vulnerability in NI LabVIEW in mgocreSH253!RevBL when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This...

CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

EUVD-2025-203966

A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. An app may be able to identify what other apps a user has installed...

EUVD-2025-203973

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may be able to access sensitive user data...

EUVD-2025-203974

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-33210

creationtimestamp| type| source ---|---|--- 2025-12-17 04:03:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/115732920252334202...

CVE-2025-68189 drm/msm: Fix GEM free for imported dma-bufs

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj-resv != &obj-resv. So we should check both this condition in addition to flags for handling the NOSHARE case. Fixes this splat that was reported with IRI...