CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-38103

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhidparse Update struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently...

CVE-2025-52837

creationtimestamp| type| source ---|---|--- 2025-07-03 01:19:51+00:00| seen| https://bsky.app/profile/kdm.pw/post/3lszkqcpne22k 2025-07-03 06:31:55+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lt246bjqfs2h 2025-07-03 09:40:24+00:00| seen|...

PT-2025-27780 · Endress+Hauser · Endress+Hauser Meac300-Fnade4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue arises from the application's behavior of returning different error messages for failed login attempts, depending on whether the failure was due to an incorrect password or a...

CVE-2025-43025

creationtimestamp| type| source ---|---|--- 2025-07-02 21:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz5cu5ew22v...

CVE-2025-45424

creationtimestamp| type| source ---|---|--- 2025-07-02 21:05:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4jegvkf2r...

CVE-2025-34075

A virtual machine escape vector has been discovered in HashiCorp Vagrant. By design, Vagrant automatically mounts the host system’s project directory into the guest VM under /vagrant. This includes the Vagrantfile configuration file, which is a Ruby script evaluated by the host every time a vagra...

CVE-2025-53492

creationtimestamp| type| source ---|---|--- 2025-07-02 17:39:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyqyob2yi2q...

CVE-2025-52891

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xml, and at least...

CVE-2025-38091

creationtimestamp| type| source ---|---|--- 2025-07-02 17:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyp75rak52p 2025-07-23 01:14:59+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lultrwme4c2p 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-53109

Model Context Protocol Servers is a collection of reference implementations for the model context protocol MCP. Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01...

CVE-2025-38091

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get planeid Why & How Fix a false positive warning which occurs due to lack of correct checks when querying planeid in DML21. This fixes the warning when performing a mode1 reset...

CVE-2025-38001

creationtimestamp| type| source ---|---|--- 2025-07-02 11:47:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsy5d6hjlk2d 2025-07-02 15:38:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsykbblxm22d 2025-07-12 03:00:05+00:00|...

CVE-2025-52462

creationtimestamp| type| source ---|---|--- 2025-07-02 09:06:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxueftojw2r 2025-07-06 20:55:49+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ltd5tu7zpk2u...

CVE-2025-4689

creationtimestamp| type| source ---|---|--- 2025-07-02 08:55:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxtqmvdjc2r...

Malicious code in identification-card-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f07ce1c75c62d4d9c717c72e271cf8c7ff2c01ecfb240af7c2299c8c662f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5561 Malicious code in identification-card-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f07ce1c75c62d4d9c717c72e271cf8c7ff2c01ecfb240af7c2299c8c662f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...