CVE-2025-67158

An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request...

CVE-2025-15407

creationtimestamp| type| source ---|---|--- 2026-01-01 18:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbez2vrux42y 2026-01-02 18:52:25+00:00| published-proof-of-concept| Telegram/frMBNFr4dxsb7OolQ--BQHkgd4kUrm0gGJMdqCQX5AgtUdY 2026-01-02 21:54:16+00:00|...

EUVD-2026-0022

Malicious code in common-cli-utils npm...

Malicious code in common-cli-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4c7bdeaa334d938afac649a1c3195ff47bf6fef18168e78b61ad22c6252450 The package common-cli-utils was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2 Malicious code in common-cli-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4c7bdeaa334d938afac649a1c3195ff47bf6fef18168e78b61ad22c6252450 The package common-cli-utils was found to contain malicious code. Source: ossf-package-analysis...

BELL-CVE-2023-54288

Bulletin has no description...

BELL-CVE-2023-54181

Bulletin has no description...

EUVD-2025-206113

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

EUVD-2025-206129

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

An Empirical Evaluation of LLM-Based Approaches for Code Vulnerability Detection: RAG, SFT, and Dual-Agent Systems

The rapid advancement of Large Language Models LLMs presents new opportunities for automated software vulnerability detection, a crucial task in securing modern codebases. This paper presents a comparative study on the effectiveness of LLM-based techniques for detecting software vulnerabilities...

DEBIAN-CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

BELL-CVE-2023-54312

Bulletin has no description...

BELL-CVE-2023-54225

Bulletin has no description...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993135 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery wor...

CVE-2025-69210

creationtimestamp| type| source ---|---|--- 2025-12-30 22:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbafsip47o2y 2026-01-24 22:44:08+00:00| seen| https://gist.github.com/alon710/2bc831a1f1b0ddaa3266a9700f8e1112 2026-04-29 07:21:08+00:00| seen|...

CVE-2025-65411

creationtimestamp| type| source ---|---|--- 2025-12-30 22:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbaf7mkmkv2y 2026-01-02 21:53:17+00:00| seen| Telegram/JxPXMxRS9I7Z3kYw2DwOkNmPXjWNfhlFmYgdz0OY1MqXE...

CVE-2023-54260

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

UBUNTU-CVE-2023-54280

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...

DEBIAN-CVE-2022-50852

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix use after free in mt7921acpiread Don't dereference "sarroot" after it has been freed...

CVE-2023-54280

CVE-2023-54280 affects the Linux kernel and concerns a race condition in CIFS when building IPC trees. The patch fixes a use-after-free in __tree_connect_dfs_target() by protecting access to TCP_Server_Info.hostname during IPC tree name construction and updating IPC tcon state on success to avoid...