CVE-2025-37873 eth: bnxt: fix missing ring index trim on error path

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

CVE-2025-37865

CVE-2025-37865 affects Linux kernel net: dsa mv88e6xxx code. The bug arises when deleting VLANs on devices where MST is unsupported: mv88e6xxx_port_vlan_leave() calls mv88e6xxx_mst_put() which looks up an MST entry by sid. If the vtu/vlan population path fails to populate vlan.sid, a stale or zer...

CVE-2025-37859

In the Linux kernel, the following vulnerability has been resolved: pagepool: avoid infinite loop to schedule delayed worker We noticed the kworker in pagepoolreleaseretry was waken up repeatedly and infinitely in production because of the buggy driver causing the inflight less than 0 and warning...

CVE-2025-37845 tracing: fprobe events: Fix possible UAF on modules

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 "tracing: tprobe-events: Fix leakage of module refcount" moved trymoduleget from findtracepointmodulecb to findtracepoint caller, but that introduced a...

CVE-2025-37845

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 "tracing: tprobe-events: Fix leakage of module refcount" moved trymoduleget from findtracepointmodulecb to findtracepoint caller, but that introduced a...

CVE-2025-47735

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

CVE-2025-4462 TOTOLINK N150RT formWsc buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-4451

creationtimestamp| type| source ---|---|--- 2025-05-09 01:24:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15649 2025-05-09 01:42:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopcd4h6sd52 2025-05-09...

CVE-2025-4448

creationtimestamp| type| source ---|---|--- 2025-05-09 01:19:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopas4mlwb42 2025-05-09 01:24:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15652 2025-05-09...

CVE-2025-4449

creationtimestamp| type| source ---|---|--- 2025-05-09 01:19:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopas2lkuu42 2025-05-09 01:24:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15651 2025-05-09...

CVE-2025-28201

An issue in Victure RX1800 ENV1.0.0r12110933 allows physically proximate attackers to execute arbitrary code or gain root access...

PostgreSQL DoS Vulnerability (Feb 2025) - Windows

PostgreSQL is prone to a denial of service DoS vulnerability due to a buffer over-read. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-20453

Name of the Vulnerable Software and Affected Versions WPBookit plugin for WordPress versions up to, and including, 1.0.2 Description The issue is related to privilege escalation via account takeover. This is due to the plugin not properly validating a user's identity prior to updating their detai...

CVE-2025-28074

creationtimestamp| type| source ---|---|--- 2025-05-08 21:15:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looteghxxqh2 2025-05-08 21:25:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15628 2025-05-08...

CVE-2025-28073

creationtimestamp| type| source ---|---|--- 2025-05-08 21:15:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2utibf32 2025-05-08 22:32:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3cv7x2n 2025-05-09...

CVE-2025-47417

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored locally on the system, and there is no visible...

CVE-2025-45787

creationtimestamp| type| source ---|---|--- 2025-05-08 20:24:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15620 2025-05-08 21:15:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2vqd7l32 2025-05-08...

CVE-2025-45790

creationtimestamp| type| source ---|---|--- 2025-05-08 20:24:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15618 2025-05-08 21:15:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot34hb6nh2 2025-05-08...

CVE-2025-4475

CVE-2025-4475 entry is rejected/not used by the CVE authority.

CVE-2025-46712

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojsph26b2 2025-05-08 20:23:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15613 2025-05-08 22:32:20+00:00| seen|...