CVE-2025-40102 KVM: arm64: Prevent access to vCPU events before init

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...

CVE-2025-64131

creationtimestamp| type| source ---|---|--- 2025-10-30 06:53:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4fetvxzr22i 2025-10-30 09:56:38+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m4fp3th4ns2h 2025-11-04 22:08:04+00:00| seen|...

[SECURITY] Fedora 42 Update: fluidsynth-2.4.8-2.fc42

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

[SECURITY] Fedora 41 Update: fluidsynth-2.4.8-2.fc41

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing access to vCPU events before vCPU initialization, which could lead to an exception injection error...

Linux Distros Unpatched Vulnerability : CVE-2025-40102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that...

From ECU to VSOC: UDS Security Monitoring Strategies

Increasing complexity and connectivity of modern vehicles have heightened their vulnerability to cyberattacks. This paper addresses security challenges associated with the Unified Diagnostic Services UDS protocol, a critical communication framework for vehicle diagnostics in the automotive...

CVE-2025-34314

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700 2025-10-28 18:06:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bjk3s7p623...

CVE-2025-62941

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through = 1.6.14...

Malicious Package

Overview deere-ui-analytics-events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-36000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through = 1.6.14...

CVE-2025-62941

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through = 1.6.14...

CVE-2025-62941

CVE-2025-62941 is a stored Cross-Site Scripting vulnerability in the WordPress plugin Events Maker by dFactory (versions up to and including 1.6.14). The issue stems from improper input neutralization during web page generation , enabling stored XSS. Public sources in the provided documents (NVD/...

CVE-2025-62941 WordPress Events Maker by dFactory plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through = 1.6.14...

CVE-2025-62941 WordPress Events Maker by dFactory plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through = 1.6.14...

PT-2025-43817

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through = 1.6.14...

WordPress plugin Events Maker by dFactory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Linux Distros Unpatched Vulnerability : CVE-2025-40021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: dynevent: Add a missing lockdown check on dynevent Since dynamicevents interface on tracefs is compatible with kprobeevents and uprobeevents, it should...

SUSE CVE-2025-40021

In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamicevents interface on tracefs is compatible with kprobeevents and uprobeevents, it should also check the lockdown status and reject if it is set...