CVE-2024-13149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arma Store Armalife allows SQL Injection. This issue affects Armalife: through 20250916. NOTE: The vendor did not inform abou...

CVE-2025-39819

In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in smb2compoundop. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment secti...

CVE-2025-10529

creationtimestamp| type| source ---|---|--- 2025-09-16 13:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxewz3l7g2u...

CVE-2025-55118

creationtimestamp| type| source ---|---|--- 2025-09-16 12:41:30+00:00| seen| Telegram/aM9nShAMWWo-Safr5T0nmanWhCWNIrKggqr2e7Gj0tQ4I 2025-09-16 12:41:34+00:00| seen| Telegram/bNHmux3Mp--yw9vgeXp5Wm2nO-CNHnyoV1hwu2bWE9ONYNc...

CVE-2025-7744 SQLi in Dolusoft's Omaspot

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dolusoft Omaspot allows SQL Injection. This issue affects Omaspot: before 12.09.2025...

CVE-2025-41248

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization...

CVE-2023-53297

creationtimestamp| type| source ---|---|--- 2025-09-16 09:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lywzmcibs62i...

CVE-2023-53285

creationtimestamp| type| source ---|---|--- 2025-09-16 09:04:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lywxo3wpkw2t 2025-09-16 10:40:39+00:00| seen| https://gist.github.com/Darkcrai86/763d4c2963869ad85cd1b9f523b7371f...

CVE-2025-2404

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2023-53289

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53285

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

CVE-2023-53296

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

CVE-2023-53300

In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fix memleak in hi846initcontrols hi846initcontrols doesn't clean the allocated ctrlhdlr in case there is a failure, which causes memleak. Add v4l2ctrlhandlerfree to free the resource properly...

CVE-2025-43344

creationtimestamp| type| source ---|---|--- 2025-09-16 01:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyw6wkhgpq2t 2025-09-17 23:14:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xnuhons2d...

CVE-2023-53270

In the Linux kernel, the following vulnerability has been resolved: ext4: fix idisksize exceeding isize problem in paritally written case It is possible for idisksize can exceed isize, triggering a warning. genericperformwrite copied = iovitercopyfromuseratomiclen // copied idisksize, newsize //...

Dolusoft Omaspot security vulnerability

Dolusoft Omaspot is a network access management tool from the Turkish company Dolusoft. A security vulnerability exists in Dolusoft Omaspot versions prior to 12.09.2025, which stems from the transmission of sensitive information in clear text and could lead to interception and elevation of...

Dolusoft Omaspot SQL Injection Vulnerability

Dolusoft Omaspot is a network access management tool from Dolusoft Turkey. A SQL injection vulnerability exists in Dolusoft Omaspot versions prior to 12.09.2025, which stems from improper neutralization of special elements and can lead to SQL injection attacks...

Beefull App security vulnerabilities

Beefull App is a shared energy network application from Beefull Turkey. A security vulnerability exists in Beefull App versions prior to 24.07.2025, which stems from a user-controllable key leading to an authorization bypass that could exploit trusted identifiers...

CVE-2023-53267

In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: fix memory leak in xlnxaddcbfornotifyevent The kfree should be called when memory fails to be allocated for cbdata in xlnxaddcbfornotifyevent, otherwise there will be a memory leak, so add kfree to fix it...

SUSE CVE-2022-50328

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential use-after-free in jbd2fcwaitbufs In 'jbd2fcwaitbufs' use 'bh' after put buffer head reference count which may lead to use-after-free. So judge buffer if uptodate before put buffer head reference count...