CVE-2025-9031

creationtimestamp| type| source ---|---|--- 2025-09-24 08:51:38+00:00| seen| Telegram/2Q6hg8sCOLJnllunR2uxdjJCbVbi4ToecJ5LYI9GrXIFYc...

CVE-2025-9846

creationtimestamp| type| source ---|---|--- 2025-09-24 04:32:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzkm7mmrcp2d...

CVE-2025-59474

creationtimestamp| type| source ---|---|--- 2025-09-23 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lzjt2ct5lm25 2025-10-21 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bu3n42q 2025-10-26 19:42:31+00:00| exploited|...

CVE-2025-39876

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fecenetphyresetafterclkenable The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev...

CVE-2025-10857

creationtimestamp| type| source ---|---|--- 2025-09-23 10:59:59+00:00| seen| https://gist.github.com/Darkcrai86/600f1732987259305bed3ff287a6b004...

CVE-2025-39877

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in stateshow stateshow reads kdamond-damonctx without holding damonsysfslock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- stateshow damonsysfsturndamonon ctx = kdamond-damonctx;...

CVE-2025-39882

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free The foreachchildofnode helper drops the reference it takes to each node as it iterates over children and an explicit ofnodeput is only needed when exiting the loop early. Drop th...

CVE-2025-10823

A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used...

CVE-2025-59526

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version 2.0.30, there is an HTML injection vulnerability in plaintext e-mails generated by Mailgen. Projects are affected if the Mailgen.generatePlaintextemail method is used and given...

CVE-2025-59434

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Hosted Flowise, an authenticated vulnerability in Flowise Cloud allows any user on the free tier to access sensitive environment variables from other tenants via the Custom JavaScri...

CVE-2025-58654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-language xili-language allows DOM-Based XSS.This issue affects xili-language: from n/a through = 2.21.3...

CVE-2025-58254

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dtbaker StylePress for Elementor full-site-builder-for-elementor allows Stored XSS.This issue affects StylePress for Elementor: from n/a through = 1.2.1...

CVE-2025-10762

creationtimestamp| type| source ---|---|--- 2025-09-22 06:33:22+00:00| seen| https://gist.github.com/Darkcrai86/672832784dfabebd4f396c06a8df94f9...

CVE-2025-10757

creationtimestamp| type| source ---|---|--- 2025-09-21 01:32:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzcqqbft4c2b 2025-09-21 05:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzd52uuqfk2c 2026-01-08 17:12:59+00:00| published-proof-of-concept|...

CVE-2025-52159

creationtimestamp| type| source ---|---|--- 2025-09-19 21:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz7ucqkb6u2g...

CVE-2025-39845

In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernelmappings Define ARCHPAGETABLESYNCMASK and archsynckernelmappings to ensure page tables are properly synchronized when calling pdpopulatekernel. For 5-level paging,...

CVE-2025-39837

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: Fix racy registrations asuswmiregisterdriver may be called from multiple drivers concurrently, which can lead to the racy list operations, eventually corrupting the memory and hitting Oops on some ASUS...

CVE-2025-39857

creationtimestamp| type| source ---|---|--- 2025-09-19 16:59:45+00:00| seen| https://gist.github.com/Darkcrai86/153a53c3a8954beedbfab81a9f1fe30a 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-39861

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: vhci: Prevent use-after-free by removing debugfs files early Move the creation of debugfs files into a dedicated function, and ensure they are explicitly removed during vhcirelease, before associated data structures ar...

CVE-2025-39866

creationtimestamp| type| source ---|---|--- 2025-09-19 16:57:09+00:00| seen| https://gist.github.com/Darkcrai86/36f3efd3636fc6874178c317d15df241 2025-09-21 00:19:29+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lzcmnw3b622v 2025-09-26 13:35:50+00:00| seen|...