pgjdbc: pgjdbc insecure authentication in channel binding

A connection handling flaw was found in the pgjdbc connection driver in configurations that require channel binding. Connections created with authentication methods that should not allow channel binding permit connections to use channel binding. This flaw allows attackers to position themselves i...

CVE-2025-6678

creationtimestamp| type| source ---|---|--- 2025-06-25 18:51:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19513...

CVE-2025-50179

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19487...

GHSA-G2XX-229F-3QJM

creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19467...

Improper Access Control

Mattermost is vulnerable to Improper Access Control. The vulnerability is due to inadequate enforcement of channel member management permissions due to a flaw in how playbook run participants are handled when linked to channels, allowing unauthorized user modifications...

RHSA-2025:9583

creationtimestamp| type| source ---|---|--- 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

This update for kernel-livepatch-MICRO-6-0-RTUpdate3 fixes the following issues: CVE-2024-50124: Bluetooth: ISO: Fix UAF on isosocktimeout bsc1232927 CVE-2024-50127: net: sched: fix use-after-free in tapriochange bsc1232908 CVE-2024-50125: Bluetooth: SCO: Fix UAF on scosocktimeout bsc1232929...

SUSE-SU-2025:20434-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

This update for kernel-livepatch-MICRO-6-0-RTUpdate4 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231 - CVE-2024-56582: btrfs: fix use-after-free in btrfsencodedreadendio bsc1235129 - CVE-2024-56605: Bluetooth: L2CAP: do not leav...

CVE-2025-45466

creationtimestamp| type| source ---|---|--- 2025-06-24 06:15:58+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41679 2025-06-24 09:00:05+00:00| published-proof-of-concept| Telegram/DspVTojs9Mw2epe6VpFQdnUoJuLQmKEuUROexQWXKje2zE...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to incorrect validity check in the sftpdecodechanneldatatopacket function. An attacker can cause the server to crash by sending specially crafted SFTP packets with payload size field set to value...

Diffusion-Based Task-Oriented Semantic Communications with Model Inversion Attack

Semantic communication has emerged as a promising neural network-based system design for 6G networks. Task-oriented semantic communication is a novel paradigm whose core goal is to efficiently complete specific tasks by transmitting semantic information, optimizing communication efficiency and ta...

CVE-2025-48466: Incorrect Authorization

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 138 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 138.0.7204.49 Linux 138.0.7204.49/50 Windows and Mac contains a number of fixes and improvements -- a list of changes is...

SONY XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from a channel authentication bypass vulnerability that stems from improper implementation of Bluetooth ERTM channel communication, which can be exploited by an attacker to gain unauthorized access to the...

CVE-2025-6516

creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19234...

CVE-2025-3227

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public...

CVE-2025-5820

Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-49965

Cross-Site Request Forgery CSRF vulnerability in Oganro PixelBeds Channel Manager and Hotel Booking Engine pixelbeds-channel-manager-booking-engine allows Cross Site Request Forgery.This issue affects PixelBeds Channel Manager and Hotel Booking Engine: from n/a through = 1.0...

Vulnerability of the lpfc_issue_els_plogi() function in the drivers/scsi/lpfc/lpfc_els.c module – This driver provides support for SCSI devices in the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the lpfcissueelsplogi function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploitation of this vulnerability could allow an attacker to cause a service failure...