btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

...

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.

...

Linux Distros Unpatched Vulnerability : CVE-2021-45473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

smb: client: fix use-after-free in smb2_query_info_compound()

...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the extractImageInfo function for user avatars. An attacker can execute arbitrary scripts in the context of another user by uploading malicious files that are served without proper content type validation...

CVE-2024-43166

creationtimestamp| type| source ---|---|--- 2025-09-03 05:19:17+00:00| seen| https://seclists.org/oss-sec/2025/q3/145 2025-09-03 07:36:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lxw4nynoqs2f 2025-09-03 13:14:54+00:00| seen|...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22428

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-9828

creationtimestamp| type| source ---|---|--- 2025-09-02 20:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuwcph4mp27...

CVE-2025-52545 Privilege escalation in the application services

E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...

Apartment Management System rented_all_info.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter uid in the file /odashboard/rentedallinfo.php for externally entered SQL statements. An attacker can exploi...

CVE-2025-9792 itsourcecode Apartment Management System e_all_info.php sql injection

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /edashboard/eallinfo.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2021-22999

creationtimestamp| type| source ---|---|--- 2025-09-01 09:10:11+00:00| seen| https://gist.github.com/Darkcrai86/aeef21f10ed3a9dfa9729e3990c5c028...

CVE-2019-7832

creationtimestamp| type| source ---|---|--- 2025-08-31 03:13:14+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2017-11213

creationtimestamp| type| source ---|---|--- 2025-08-31 03:13:10+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2019-7066

creationtimestamp| type| source ---|---|--- 2025-08-31 03:13:07+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2016-7877

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:37+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2017-0081

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:23+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-07-29 12:01:33+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:56+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA...

CVE-2017-0056

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:18+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-07-29 12:01:11+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:48+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ...