BELL-CVE-2025-38720

Bulletin has no description...

BELL-CVE-2025-38717

Bulletin has no description...

BELL-CVE-2025-38698

Bulletin has no description...

BELL-CVE-2025-38683

Bulletin has no description...

BELL-CVE-2025-38695

Bulletin has no description...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mm/damon/ops-common module not ignoring migration requests from invalid nodes...

CVE-2025-41046

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:37+00:00| seen| Telegram/fn6uAfF6kTNfqHlJ1sbBsR6Ct9-Y78LNBRYWS26xvWOdnDc...

Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.

...

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

...

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

...

An Empirical Study of Vulnerabilities in Python Packages and Their Detection

In the rapidly evolving software development landscape, Python stands out for its simplicity, versatility, and extensive ecosystem. Python packages, as units of organization, reusability, and distribution, have become a pressing concern, highlighted by the considerable number of vulnerability...

VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report

Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

...

An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).

...

CVE-2025-58056

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters LF as a chunk-size line...

CVE-2025-58458

creationtimestamp| type| source ---|---|--- 2025-09-03 15:27:54+00:00| seen| Telegram/uNwJBvZMA0qqi-g8vBWCvdXTi9hlSTEy4UO4ztxG0Mz5E...

CVE-2025-58632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dadevarzan Dadevarzan WordPress Common dadevarzan-common allows Stored XSS.This issue affects Dadevarzan WordPress Common: from n/a through = 2.2.2...

WordPress Dadevarzan WordPress Common Plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Dadevarzan WordPress Common versions = 2.2.2...

CVE-2025-58632

CVE-2025-58632 is a stored XSS vulnerability in the Dadevarzan WordPress Common plugin (

CVE-2025-58632 WordPress Dadevarzan WordPress Common Plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dadevarzan Dadevarzan WordPress Common dadevarzan-common allows Stored XSS.This issue affects Dadevarzan WordPress Common: from n/a through = 2.2.2...