CVE-2025-54970

creationtimestamp| type| source ---|---|--- 2025-10-27 17:05:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115447218372328793 2025-10-27 19:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m474wsx5bv2p...

Security update for cmake

This update for cmake fixes the following issues: CVE-2025-9301: Fixed assertion failure due to improper validation bsc1248461 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

Identity Spoofing

org.igniterealtime.openfire, xmppserver is vulnerable to identity spoofing. The vulnerability is due to regex-based extraction of the Common Name CN from an unescaped, provider-dependent Distinguished Name DN string, which allows an attacker to impersonate other users using crafted certificate...

CVE-2025-12209

creationtimestamp| type| source ---|---|--- 2025-10-27 04:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45lte6z4e2u...

CVE-2025-12210

creationtimestamp| type| source ---|---|--- 2025-10-27 04:31:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45lkfr2io2o...

EUVD-2025-36081

Malicious code in legacyesgodfcommon npm...

MAL-2025-48735 Malicious code in legacy_esg_odf_common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c56f634d22583d4f5aa8a52eeab8e3d5c0659c0cbfd1a5a9b0a4741b02ca251d Any computer that has this package installed or running should be considered...

Malicious code in gear-bridge-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e84b9a555df93618c5127eddd0b90f79c79e8b54a5c60a0deb241487f867d7 The OpenSSF Package Analysis project identified 'gear-bridge-common' @ 1337.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-48607 Malicious code in gear-bridge-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e84b9a555df93618c5127eddd0b90f79c79e8b54a5c60a0deb241487f867d7 The OpenSSF Package Analysis project identified 'gear-bridge-common' @ 1337.1.0 npm as malicious. It is considered malicious because: - The...

EUVD-2025-35948

Malicious code in gear-bridge-common npm...

Is Your Prompt Poisoning Code? Defect Induction Rates and Security Mitigation Strategies

Large language models LLMs have become indispensable for automated code generation, yet the quality and security of their outputs remain a critical concern. Existing studies predominantly concentrate on adversarial attacks or inherent flaws within the models. However, a more prevalent yet...

K000157114: cPython vulnerability CVE-2025-4517

Security Advisory Description Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter...

Access Control Bypass

Overview @kottster/common is a Common types and utilities for Kottster Affected versions of this package are vulnerable to Access Control Bypass via the initApp and installPackagesForDataSource actions. An attacker can gain unauthorized administrative access and execute arbitrary system commands ...

CVE-2025-10705

creationtimestamp| type| source ---|---|--- 2025-10-23 14:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3umda5j2n2u...

Vulnerabilities fixed in Oracle Commerce

Oracle has fixed vulnerabilities in several subcomponents of Oracle Commerce products, including Oracle Middleware Common Libraries, Oracle Documaker, Oracle WebCenter Forms Recognition, Oracle WebLogic Server, and Oracle Application Testing Suite. The vulnerabilities allow unauthenticated...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2025-62708 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2025-62707 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

com.checkmarx:cx-client-common (>=2023.2.2, <=2023.4.1), com.checkmarx:cx-ws-fs-agent (>=23.0.1, <=23.0.4) +14 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.9.15)

io.vertx:vertx-web MAVEN version 3.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - com.checkmarx:cx-client-common =2023.2.2, =23.0.1, =3.1.2.rc1, =3.1.2.rc1, =3.1.2.rc1, =1.3.0, =1.4.0 and more Source cves...

CVE-2025-60341

creationtimestamp| type| source ---|---|--- 2025-10-22 17:51:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115419084710628503 2025-10-22 21:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3sr2vqqlb2c...

CVE-2023-53728

In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure timer ID search-loop limit is valid posixtimeradd tries to allocate a posix timer ID by starting from the cached ID which was stored by the last successful allocation. This is done in a loop searching the ID...