PT-2025-39339

CVE-2025-00123 UNDER DEVELOPMENT - USE AT YOUR OWN RISK!!! Enhanced Incident Summary Report Executive Summary On September 18, 2025, a medium-severity incident Risk Score https://t.co/mYu56R5gA4...

GHSA-WCWH-7GFW-5WRR

creationtimestamp| type| source ---|---|--- 2025-09-23 19:04:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115255164461051194...

CVE-2025-0672

creationtimestamp| type| source ---|---|--- 2025-09-23 17:52:57+00:00| seen| Telegram/tWCfJsJXozDipwnBfLvxjYY8gNa9gDtb75Z2Y7Zm7kZFI...

CVE-2024-38687

creationtimestamp| type| source ---|---|--- 2025-09-23 17:03:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lzjfom2m6s2y...

CVE-2025-5717

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-5717

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-5717 Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-5717

CVE-2025-5717 describes an authenticated remote code execution in multiple WSO2 products caused by improper input validation in the Event Processor Admin Service. An attacker with administrative access to SOAP admin services can deploy a Siddhi execution plan containing malicious Java code, enabl...

CVE-2025-5717 Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-9588

creationtimestamp| type| source ---|---|--- 2025-09-23 12:54:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115253710943079734 2025-09-24 09:02:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzl3bpoa232w...

CVE-2025-39869

creationtimestamp| type| source ---|---|--- 2025-09-23 07:40:04+00:00| seen| https://gist.github.com/Darkcrai86/6944c9336af9e00a69604509d0496e86 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-10766

A weakness has been identified in SeriaWei ZKEACMS up to 4.3. This issue affects the function Download of the file EventViewerController.cs. Executing manipulation of the argument ID can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to t...

CVE-2025-10764

A vulnerability was identified in SeriaWei ZKEACMS up to 4.3. This affects the function Edit of the file src/ZKEACMS.EventAction/Controllers/PendingTaskController.cs of the component Event Action System. Such manipulation of the argument Data leads to server-side request forgery. The attack may b...

AZL-67643 CVE-2025-39886 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

CVE-2025-39886

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

CVE-2025-39886 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

CVE-2025-39886 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...

GHSA-PRRF-397V-83XH

creationtimestamp| type| source ---|---|--- 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen| https://gist.github.com/konard/ae5644ee09391620c298630fdcf2722d 2025-10-26 10:16:49+00:00| seen|...

kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...

PT-2025-39176

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A remote code execution issue exists in WSO2 products due to insufficient input validation within the event processor admin service. An attacker with administrative access can deploy a...