CVE-2025-67289

creationtimestamp| type| source ---|---|--- 2025-12-22 19:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3malyn66f2s2r 2025-12-23 05:34:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/115767252484769956 2025-12-23 09:16:50+00:00| seen|...

CVE-2025-68326

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stackdepot usage Add missing stackdepotinit call when CONFIGDRMXEDEBUGGUC is enabled to fix the following call stack: BUG: kernel NULL pointer dereference, address: 0000000000000000 Workqueue: drmschedrunjobwork...

CVE-2025-54890

creationtimestamp| type| source ---|---|--- 2025-12-22 15:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maljr2adl62m 2026-01-05 11:01:45+00:00| published-proof-of-concept| Telegram/bEi2Gyat6djXuIRCvYCqeze7lrAEFHYQrA4USIXVnSJ3PA 2026-01-06 15:45:21+00:00| seen|...

CVE-2025-13220

creationtimestamp| type| source ---|---|--- 2025-12-22 11:35:09+00:00| seen| https://gist.github.com/Darkcrai86/4cde20eae3d34ce50a57634af0b736f6...

CVE-2025-15005

creationtimestamp| type| source ---|---|--- 2025-12-22 01:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mak3ceog6l2u 2025-12-22 10:45:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115762810359101420...

CVE-2025-14080

creationtimestamp| type| source ---|---|--- 2025-12-21 05:17:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mahxqk6oab2q 2025-12-22 11:39:01+00:00| seen| https://gist.github.com/Darkcrai86/8c75f771fc8d492826de8125df78cc8f...

Fedora 43 : nextcloud (2025-86c0829159)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-86c0829159 advisory. 32.0.3 release, fixes RHBZ 2420196 RHBZ 2420197 RHBZ 2420198 RHBZ 2421368 Tenable has extracted the preceding description block directly from the...

CVE-2025-67586

creationtimestamp| type| source ---|---|--- 2025-12-20 09:00:05+00:00| published-proof-of-concept| Telegram/IsgSMFcAG-ApRHDdzepdVGoV7GGJJ0rJ6FS3vxu8huYyqZo 2026-04-22 13:01:06+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mk3kjypomc27 2026-04-23 21:03:14+00:00| seen|...

CVE-2025-13008

creationtimestamp| type| source ---|---|--- 2025-12-19 13:57:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3madtt52pq42e 2025-12-24 18:19:10+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3maqut75xpk2w 2025-12-27 15:59:13+00:00| seen|...

EUVD-2025-204443

Not used...

BELL-CVE-2025-68210

Bulletin has no description...

CVE-2025-47321

Memory corruption while copying packets received from unix clients...

CVE-2025-67845

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences...

CVE-2025-64663

creationtimestamp| type| source ---|---|--- 2025-12-18 23:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macdhl6lso2y 2025-12-19 05:34:54+00:00| seen| https://infosec.exchange/users/offseq/statuses/115744603727230384...

CVE-2025-64675

Microsoft Azure Cosmos DB is affected by CVE-2025-64675, a cross-site scripting (XSS) issue caused by improper input neutralization during web page generation. This enables spoofing over a network and, per Kaspersky, there are public exploits. The provided documents do not specify affected versio...

CVE-2025-65037 Azure Container Apps Remote Code Execution Vulnerability

...

CVE-2025-63757

Integer overflow vulnerability in the yuv2ya16Xctemplate function in libswscale/output.c in FFmpeg 8.0. Mitigation To mitigate this issue, users should avoid processing untrusted or specially crafted media files with applications that utilize FFmpeg. Limiting the exposure of applications using...

EUVD-2025-204320

BullWall Server Intrusion Protection services are initialized after login services. An authenticated attacker with administrative permissions can log in after boot and bypass MFA. SIP service does not retroactively enforce the challenge or disconnect unauthenticated sessions. Versions 4.6.0.0,...

EUVD-2025-204359

File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server. Attackers can create a custom PHP payload, upload and unzip it, and then execute arbitrary system commands through a crafted PHP script with ...

EUVD-2025-204367

An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modification Request...