WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Event post versions = 5.10.3...

WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by n0arafatn0 in WordPress Plugin Event Tickets versions = 5.26.3...

WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by ? in WordPress Theme News Event versions = 1.0.1...

CVE-2025-9902

creationtimestamp| type| source ---|---|--- 2025-10-16 11:32:06+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m3cnvqubbx2m...

CVE-2025-39983

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...

CVE-2025-58079

creationtimestamp| type| source ---|---|--- 2025-10-16 10:17:49+00:00| seen| Telegram/5uxJZyDywNI4ZrluNgLEEvt5haWpr28KiTLsS2TDWE6o-o...

CVE-2025-40765

creationtimestamp| type| source ---|---|--- 2025-10-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-09...

CVE-2025-54461

creationtimestamp| type| source ---|---|--- 2025-10-16 09:17:08+00:00| seen| Telegram/iaARMtl-jEacFQgpxzPM4uI73xEGFo4UbKC6eXXbNEtoPQ...

Command Injection

OctoPrint is vulnerable to Command Injection. The vulnerability is due to improper handling of specially crafted filenames in uploaded files that can be included in system commands defined in event handlers, which allows an authenticated attacker to execute arbitrary commands when the correspondi...

CVE-2025-8486

creationtimestamp| type| source ---|---|--- 2025-10-16 04:20:48+00:00| seen| Telegram/BUoGx6NDDixNiQfqIx7EkMEExQqZfPip7pULfWR07ftDpo 2026-02-02 17:20:22+00:00| seen| Telegram/xt-FYBUgAB-JPn613veQ7TLaB3vDDuWlzNCaN8mxcH03YKg...

CVE-2025-43280

creationtimestamp| type| source ---|---|--- 2025-10-15 20:16:33+00:00| seen| Telegram/d9KzVj8YOqfLRJYBLB7DDzJD6nlVFfiViOzC7HDb73Yzg...

CVE-2025-59197

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally...

CVE-2025-9063

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...

EUVD-2025-34589

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...

CVE-2025-39983

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...

DEBIAN-CVE-2025-39983

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...

UBUNTU-CVE-2025-39983

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...

CVE-2025-39983

CVE-2025-39983 is a Linux kernel Bluetooth issue: UAF in hci_conn_tx_dequeue due to improper locking of hdev while processing HCI_EV_NUM_COMP_PKTS, leading to a KASAN slab-use-after-free in hci_conn.c and related Bluetooth code paths (hci_num_comp_pkts_evt, hci_event.c, hci_core.c). Affects the B...

CVE-2025-39983 Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...