CVE-2025-61181

daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature...

CVE-2025-62697

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:53+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667030752 2025-10-20 22:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nt74uyw72o...

CVE-2025-40009

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: check p-vecbuf for NULL When the PAGEMAPSCAN ioctl is invoked with veclen = 0 reaches pagemapscanbackoutrange, kernel panics with null-ptr-deref: 44.936808 Oops: general protection fault, probably for non-canonic...

CVE-2025-40004

In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix buffer overflow in USB transport layer A buffer overflow vulnerability exists in the USB 9pfs transport layer where inconsistent size validation between packet header parsing and actual data copying allows a malicious...

CVE-2025-9574 Missing Authentication Vulnerability

Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . All firmware versions with the Serial Number from 2000 to 5166...

CVE-2025-40012

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix warning in smcrxsplice when calling getpage smcloregisterdmb allocates DMB buffers with kzalloc, which are later passed to getpage in smcrxsplice. Since kmalloc memory is not page-backed, this triggers WARNONONCE in...

CVE-2025-61132

creationtimestamp| type| source ---|---|--- 2025-10-19 23:51:40+00:00| seen| https://gist.github.com/BrookeYangRui/94c3bee0c2cbc1ed81a21d4448550c21...

CVE-2025-9562

creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:44+00:00| seen| Telegram/zn9jSDQ7qoC3CcrkLXOFT7Rfc2ULM442CjvxxkvWHDzG-A...

CVE-2025-33182

creationtimestamp| type| source ---|---|--- 2025-10-18 06:28:54+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3h5vggl7c2l...

EUVD-2025-34951

Not used...

CVE-2025-62504

Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerability in the Lua filter. When a Lua script executing in the response phase rewrites a response body so that its size exceeds the configured...

CVE-2025-60359

radare2 v5.9.8 and before contains a memory leak in the function rbinobjectnew...

CVE-2025-6950

creationtimestamp| type| source ---|---|--- 2025-10-17 07:34:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3er3p3vh72k 2025-10-17 13:34:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115389765944283292 2025-10-20 03:30:59+00:00| seen|...

Microsoft Office Denial of Service Vulnerability (CNVD-2025-24415)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A denial of service vulnerability exists in Microsoft Office, which can be exploited by attackers to cause...

CVE-2025-54760

creationtimestamp| type| source ---|---|--- 2025-10-16 10:17:53+00:00| seen| Telegram/H1rKfols6HmgVytanTnX-zVAM1GLs7MkueHDucKNsouQ46I...

CVE-2025-59778

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/...

CVE-2025-53521

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/ 2026-03-27 19:18:40+00:00| published-proof-of-concept|...

CVE-2025-55036

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/...

CVE-2025-59483

creationtimestamp| type| source ---|---|--- 2025-10-15 14:16:02+00:00| seen| Telegram/hHwt279m4B7whsCaLSnjAAbtbRqc8bvUaWCqUB-t0qXhVs...

CVE-2025-11709

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability affects Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...