4964 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990378 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989987)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989987 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one...
EUVD-2025-37566
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-403...
EUVD-2025-37567
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276...
CVE-2025-11733
creationtimestamp| type| source ---|---|--- 2025-11-04 05:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ru4sy74j26 2026-04-08 23:32:00+00:00| seen| Telegram/Q2sDM2Wt9bcBF4c4T8HKihXvOrYfKDp36LdjMRJwxrv9eJM...
CVE-2025-47352
creationtimestamp| type| source ---|---|--- 2025-11-04 05:15:16+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4rrp4atxze2...
EUVD-2025-37599
The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reusebuildersingleposttitle' shortcode in all versions up to, and including, 1.7. This is due to insufficient input sanitization and output escaping on the 'style' attribute. This makes it possible for...
EUVD-2025-37634
The issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
EUVD-2025-37663
The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able to disable Stolen Device Protection...
EUVD-2025-37720
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to access protected user data...
EUVD-2025-37629
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...
EUVD-2025-37659
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to memory corruption...
Would you sext ChatGPT? (Lock and Code S06E22)
This week on the Lock and Code podcast … In the final, cold winter months of the year, ChatGPT could be heating up. On October 14, OpenAI CEO Sam Altman said that the "restrictions" that his company previously placed on their flagship product, ChatGPT, would be removed, allowing, perhaps, for...
Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Multiple Spring Framework Vulnerabilities (CVE-2024-38828,CVE-2024-38820)
Summary Spring MVC controller vulnerable to a DoS attack and DataBinder Case Sensitive Match Exception. These vulnerabilities were remediated. Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS...
CVE-2025-34270
creationtimestamp| type| source ---|---|--- 2025-10-30 23:44:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h5dslq5c2k...
EUVD-2025-37115
Malicious code in epic-path-utils npm...
CVE-2025-54471 NeuVector is shipping cryptographic material into its binary
NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...
A Comprehensive Evaluation and Practice of System Penetration Testing
With the rapid advancement of information technology, the complexity of applications continues to increase, and the cybersecurity challenges we face are also escalating. This paper aims to investigate the methods and practices of system security penetration testing, exploring how to enhance syste...