CVE-2025-45006

creationtimestamp| type| source ---|---|--- 2025-07-02 17:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyrvczujl2m...

CVE-2025-38091

creationtimestamp| type| source ---|---|--- 2025-07-02 17:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyp75rak52p 2025-07-23 01:14:59+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lultrwme4c2p 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-53494

creationtimestamp| type| source ---|---|--- 2025-07-02 16:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyoozmbyp2q...

CVE-2025-38093

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown...

CVE-2025-38092

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use listfirstentryornull for opinfogetlist The listfirstentry macro never returns NULL. If the list is empty then it returns an invalid pointer. Use listfirstentryornull to check if the list is empty...

CVE-2025-53109 Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling

Model Context Protocol Servers is a collection of reference implementations for the model context protocol MCP. Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01...

CGA-HGC3-FRCX-CR84

Bulletin has no description...

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Automation Workflow (CVE-2025-36038)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

PT-2025-28029

Name of the Vulnerable Software and Affected Versions Alinto SOPE SOGo versions 2.0.2 through 5.12.2 Description This issue involves a NULL pointer dereference in sope-core/NGExtensions/NGHashMap.m that can lead to a crash of the SOGo application. The vulnerability occurs when a request contains ...

WordPress Amazon Products to WooCommerce plugin <= 1.2.7 - Unauthenticated Server-Side Request Forgery vulnerability

Unauthenticated Server-Side Request Forgery vulnerability discovered by ch4r0n in WordPress Plugin Amazon Products to WooCommerce versions = 1.2.7...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2022-37450

creationtimestamp| type| source ---|---|--- 2025-07-01 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lswluwv7jh27 2026-06-19 12:47:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ad06381-3010-461b-a1d8-d2e5e954b632...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CGA-88HR-3C27-VPX8

Bulletin has no description...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463chw...

CVE-2025-49482

creationtimestamp| type| source ---|---|--- 2025-07-01 12:10:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20021 2025-07-01 12:26:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:17:44+00:00| seen|...

Security Bulletin: parse.ParseUnverified vulnerability affects watsonx.data

Summary golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request who...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.19.2 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

CVE-2025-53003

creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19999 2025-07-01 07:40:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsv734unv62l...

WordPress Diza Theme <= 1.3.9 is vulnerable to Local File Inclusion

Software Diza Type Theme Vulnerable versions = 1.3.9 Fixed in 1.3.11 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-52729 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 99cb58072740 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...