CVE-2025-39864

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmpbss Following bssfree quirk introduced in commit 776b3580178f "cfg80211: track hidden SSID networks properly", adjust cfg80211updateknownbss to free the last beacon frame elements only if...

CVE-2025-39838

In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here. NULL is passed to cifssfumakenode without checks, which passes it unchecked to cifsstrnduptoutf16, which in turn passes ...

CVE-2025-39842

In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2deleteosb, ocfs2journalshutdown has already been executed in ocfs2dismountvolume, so osb-journal must be NULL. Therefore, the following calltrace wil...

CVE-2025-59215

creationtimestamp| type| source ---|---|--- 2025-09-18 21:49:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115227503962306130 2025-09-19 06:33:42+00:00| seen| https://bsky.app/profile/secqube.com/post/3lz6andgc6n2u...

CVE-2025-30468

creationtimestamp| type| source ---|---|--- 2025-09-17 23:14:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xnuhons2d...

CVE-2025-10615

A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-8463

creationtimestamp| type| source ---|---|--- 2025-09-17 15:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz266ba5m72f...

CVE-2025-10188

creationtimestamp| type| source ---|---|--- 2025-09-17 07:10:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzbqid5dl2m...

CVE-2025-58116

creationtimestamp| type| source ---|---|--- 2025-09-17 07:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzbjr6x3x2c...

CVE-2025-59336

creationtimestamp| type| source ---|---|--- 2025-09-16 21:33:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyybk4k7al2c...

CVE-2025-39822

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: fix signedness in thislen calculation When importing and using buffers, buf-len is considered unsigned. However, buf-len is converted to signed int when committing. This can lead to unexpected behavior if the buffer...

CVE-2025-39813

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in traceprintkseq during ftracedump When calling ftracedumpone concurrently with reading tracepipe, a WARNONONCE in traceprintkseq can be triggered due to a race condition. The issue occurs because:...

CVE-2025-8057

creationtimestamp| type| source ---|---|--- 2025-09-16 14:42:36+00:00| seen| Telegram/jNGmalmIuInGLetuRsCw8llIB5Qw72F8JzpXwqQpf6rY8...

CVE-2025-39823

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

AIX/VIOS is vulnerable to arbitrary file write due to Kerberos (CVE-2025-36244)

IBM SECURITY ADVISORY First Issued: Tue Sep 16 08:16:52 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/nasadvisory4.asc Security Bulletin: AIX is vulnerable to arbitrary file write due to Kerberos CVE-2025-36244...

CVE-2025-59399

creationtimestamp| type| source ---|---|--- 2025-09-15 21:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyvpzufsax2x...

CVE-2025-59141

creationtimestamp| type| source ---|---|--- 2025-09-15 19:21:19+00:00| seen| https://bsky.app/profile/bad-at-computer.bsky.social/post/3lyvjo7ma7c2n 2025-09-15 21:25:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyvqlrgcxf2g 2025-09-16 02:09:44+00:00| seen|...

CVE-2025-9072

creationtimestamp| type| source ---|---|--- 2025-09-15 14:01:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyuxsw7bjl2t...

CVE-2025-10426

creationtimestamp| type| source ---|---|--- 2025-09-15 05:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyu4ql7xf52f 2025-09-15 07:17:54+00:00| seen| https://gist.github.com/Darkcrai86/035d1aec046141e74dee8fb01cfe6de6...

Unspecified vulnerability in Xen (CNVD-2025-21353)

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. Xen has a security vulnerability that can be exploited by...