CVE-2025-41232

creationtimestamp| type| source ---|---|--- 2025-05-21 12:26:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114545810980701001 2025-05-21 14:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpotlbcb4m2l 2025-05-21 18:25:34+00:00| seen|...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-44884

The Planet FW-WGS-804HPT , a wall-mounted managed switch, contains a stack-based buffer overflow vulnerability in the web_sys_infoContact_post function. The flaw occurs because the function fails to correctly validate the length of input data, specifically when processing the contact parameter in...

c7n-azure (>=0.7.18, <=0.7.19), c7n-kube (>=0.2.18, <=0.2.19) +6 more potentially affected by CVE-2025-47273 via setuptools (65.4.1)

setuptools PYPI version 65.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure =0.7.18, =0.2.18, =0.1.0, =1.9.0, =1.10.0 - shaystack 0.10.0 - stapy 0.3.1 Source cves: CVE-2025-47273 Source advisory:...

Malware in os-info-checker-es6

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4013 Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

1000 Projects Daily College Class Work Report Book – Injection Vulnerabilities

1000 Projects Daily College Class Work Report Book is an open source college class work report book by 1000 Projects. An injection vulnerability exists in 1000 Projects Daily College Class Work Report Book version 1.0, which originates from SQL injection due to the operation of the parameter batc...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219: Insertion of Sensitive Information Into Sent Data

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK prior to 2025-05-19 exposes a vulnerability where an IMS call lets a subscriber read the utran-cell-id-3gpp (ECI) from the Cellular-Network-Info SIP header, potentially enabling crowdsourced cell-location inference. The issue concerns O2 UK VoLTE/IMS behavior and references ETSI TS 124 229 ...

c7n-azure (>=0.7.18, <=0.7.19), c7n-kube (>=0.2.18, <=0.2.19) +6 more potentially affected by CVE-2025-47273 via setuptools (65.4.1)

setuptools PYPI version 65.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure =0.7.18, =0.2.18, =0.1.0, =1.9.0, =1.10.0 - shaystack 0.10.0 - stapy 0.3.1 Source cves: CVE-2025-47273 Source advisory:...

OESA-2025-1516 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

Projectworlds Hospital Database Management System Injection Vulnerability

Projectworlds Hospital Database Management System is a hospital database management system from Projectworlds India. An injection vulnerability exists in Projectworlds Hospital Database Management System version 1.0, which stems from improper handling of the parameter MedID in the file...

rsync security update

3.2.5-3 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 3.2.5-2 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Ra...

Malware in payouts-banking-info

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-C8HM-H9GV-8JPJ

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

Alibaba Cloud Linux 3 : 0056: nodejs:14 (ALINUX3-SA-2021:0056)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0056 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22918: Node.js before 16.4.1,...

CVE-2025-30322

creationtimestamp| type| source ---|---|--- 2025-05-13 18:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501971768097313 2025-05-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eae6sgl2o 2025-05-13 21:24:39+00:00| seen| https://t.me/cvedetector/252...