RockyLinux 10 : postgresql16 (RLSA-2026:0525)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0525 advisory. postgresql: libpq undersizes allocations, via integer wraparound CVE-2025-12818 Tenable has extracted the preceding description block directly from the RockyLinu...

Debian dla-4438 : libbson-1.0-0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4438 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4438-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-68925

creationtimestamp| type| source ---|---|--- 2026-01-13 19:40:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115889488085569559...

CVE-2025-71085

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr There exists a kernel oops caused by a BUGONnhead INTMAX i.e. intskbheadroomskb + lendelta skbheadroomskb is meant to ensure that delta = headroom - skbheadroomskb is...

CVE-2025-30693

creationtimestamp| type| source ---|---|--- 2026-01-13 15:10:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcctlvwwni23 2026-01-13 17:00:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888859315910636...

CVE-2025-15514

creationtimestamp| type| source ---|---|--- 2026-01-13 00:02:07+00:00| published-proof-of-concept| Telegram/4zuUlGU6EvpMTWPbip1D3Ts-WMioI6unE3WF1UcmysLKI 2026-01-13 02:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbinfeq6o2c...

CVE-2025-71027

CVE-2025-71027 applies to Tenda AX-3 (v16.03.12.10_CN). A stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function is described across CNVD/CNNVD/Red Hat/NVD feeds as causing a Denial of Service via a crafted request. The connected sources confirm the vulnerable component and t...

MiracleLinux 8 : varnish:6 (AXSA:2025-9999:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9999:01 advisory. varnish: request smuggling attacks CVE-2025-47905 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Not...

CVE-2025-68307 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-68307 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-67813

creationtimestamp| type| source ---|---|--- 2026-01-12 18:02:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcampydcvw2y 2026-02-02 12:54:32+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mduvdjblu62l 2026-07-26 02:00:06+00:00| seen|...

CVE-2025-69275

creationtimestamp| type| source ---|---|--- 2026-01-12 05:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc7dgbbena2e 2026-01-12 06:01:26+00:00| seen| Telegram/pWbuGN1KVOAQ47r4fm52NlPcXYWbBQdOrOq5aZ05KasKkpQ 2026-01-12 08:08:29+00:00| seen|...

CVE-2025-9222

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to achieve stored cross-site scripting by exploiting GitLab Flavored Markdown...

CVE-2025-13854

creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:08+00:00| seen| Telegram/Dh9HLp80PshBFHqXc6totOihOvBfjAyAmtgDAPhTaGebfs 2026-01-09 13:28:32+00:00| seen| https://gist.github.com/Darkcrai86/f14046afeb13f501ed917628655b12b1 2026-01-09 14:41:26+00:00| seen|...

CVE-2025-13701

creationtimestamp| type| source ---|---|--- 2026-01-09 13:04:47+00:00| seen| Telegram/Q6W0k1WKh9B3-4oN0DiaBhUByTzqYQ-BzTWUpEPQoF3Zxk 2026-01-09 13:28:55+00:00| seen| https://gist.github.com/Darkcrai86/f2b9e1f889c69876dcb4efe2362fbeeb...

CVE-2025-13854 Curved Text <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' parameter of the arctext shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-14782

creationtimestamp| type| source ---|---|--- 2026-01-09 09:09:55+00:00| seen| https://gist.github.com/Darkcrai86/b6e25ea05efbd65ed3b610555f4296ad...

CVE-2025-53470

creationtimestamp| type| source ---|---|--- 2026-01-08 14:58:25+00:00| seen| https://seclists.org/oss-sec/2026/q1/40 2026-01-08 16:23:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbwfev4mns2x 2026-01-10 12:24:40+00:00| seen|...

CVE-2025-36640

creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66x4le42s 2026-01-13 16:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mccwhyry5g2b 2026-01-13 16:10:52+00:00| seen|...

CVE-2025-22728

creationtimestamp| type| source ---|---|--- 2026-01-08 11:05:26+00:00| seen| https://gist.github.com/Darkcrai86/ae9e072f74a6368e6b5d62a76add824b 2026-01-08 18:13:39+00:00| seen| Telegram/8fRJHN3hFBSebJqdKWxD-1j43348WuwoDT4ZiTfkSQU 2026-01-10 03:08:59+00:00| seen|...

CVE-2025-67922

creationtimestamp| type| source ---|---|--- 2026-01-08 10:58:13+00:00| seen| https://gist.github.com/Darkcrai86/718da7396e583e48dc291b5c4d5e05a0 2026-01-08 17:14:13+00:00| seen| Telegram/L7plRnyCwJgGqljpyToFiGqVUyYxKd0NGAegNOrqbuTI8dQ...