Low: Red Hat Security Advisory: ncurses security update

An update for ncurses is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2025-54982

creationtimestamp| type| source ---|---|--- 2025-08-05 06:01:21+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvmzu2f3sz2k 2025-08-05 07:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvn6g7t3zj2l 2025-08-05 07:43:04+00:00| seen|...

CVE-2025-8635

creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-783/...

CVE-2025-8654

creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-802/ 2025-08-06 04:16:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvpehq7zau2a...

Linux Distros Unpatched Vulnerability : CVE-2025-23145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in canacceptnewsubflow When testing valkey benchmark tool with MPTCP...

PT-2025-32213 · Undefined · Undefined

CVE-2025-54975 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-54975 Published : Aug. 5, 2025, 4:16 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

Linux Distros Unpatched Vulnerability : CVE-2022-20132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead t...

PT-2025-31948 · Unknown · Agenzia Impresa Eccobook

Name of the Vulnerable Software and Affected Versions: Agenzia Impresa Eccobook versions prior to 2.81.2 Description: An Insecure Direct Object Reference IDOR vulnerability exists in the PdfHandler component. This allows unauthenticated attackers to read confidential documents. The vulnerability ...

PT-2025-32212 · Undefined · Undefined

CVE-2025-54974 - Apache HTTP Server Denial of Service CVE ID : CVE-2025-54974 Published : Aug. 5, 2025, 4:16 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 139 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 139.0.7258.66 Linux 139.0.7258.66/67 Windows and Mac contains a number of fixes and improvements -- a list of changes is...

WordPress Use-your-Drive plugin <= 3.3.1- Unauthenticated Stored Cross-Site Scripting via File Metadata vulnerability

WordPress Use-your-Drive plugin = 3.3.1- Unauthenticated Stored Cross-Site Scripting via File Metadata vulnerability discovered by floerer in WordPress Plugin Use-your-Drive versions = 3.3.1...

WordPress Woffice Core plugin <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion vulnerability

Authenticated Contributor+ Arbitrary File Deletion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Woffice Core versions = 5.4.26...

CVE-2025-8109

creationtimestamp| type| source ---|---|--- 2025-08-04 15:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvljvfs6452a...

CVE-2025-30099

CVE-2025-30099 affects Dell PowerProtect Data Domain with DD OS (Feature Release 7.7.1.0–8.1.0.10; LTS2024 7.13.1.0–7.13.1.25; LTS 2023 7.10.1.0–7.10.1.50) and is due to an Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) in the DDSH CLI. A low-privilege, l...

CVE-2025-8515

creationtimestamp| type| source ---|---|--- 2025-08-04 12:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlapzac3r2s...

Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed

Summary There are multiple vulnerabilities impacting IBM Watson Studio in Cloud Pak for Data. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2019-12900 DESCRIPTION: BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bound...

Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing - In Connect2id Nimbus JOSE+JWT, an attacker can cause a denial of service

Summary Connect2id Nimbus-JOSE-JWT is vulnerable to a denial of service, caused by improper validation of user requests by the PasswordBasedDecrypter PBKDF2 component. By sending a specially crafted request using a large JWE p2c header, a remote attacker could exploit this vulnerability to cause ...

WordPress POST SMTP Plugin Privilege Escalation

The vulnerability of the getdetails function in the POST SMTP Mailer plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges and disclose sensitive...

U.S. Dept Of Defense: Reflected Cross-Site Scripting (XSS)

A reflected cross-site scripting XSS vulnerability was discovered. An attacker could have crafted a URL that, when visited, would have triggered a JavaScript alert function, confirming the vulnerability. The vulnerability was present in the affected system. No further details about the affected...

Advisory ROSA-SA-2025-2912

software: mosquitto 2.0.20 WASP: ROSA-CHROME unaffected versions = mosquitto-2.0.20-1 affected versions mosquitto-2.0.20-1 CVE-ID: CVE-2024-3935 BDU-ID: 2024-09880 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Eclipse Mosquitto message broker is related to memory re-release. Exploitation of th...