Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a data contention in shownumainfo...

CVE-2025-8114

creationtimestamp| type| source ---|---|--- 2025-07-24 14:32:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114908694803642637 2025-09-19 18:51:31+00:00| seen| https://gist.github.com/EbonJaeger/2ba8ad95fbe2fa2ac2e44b74f6abfe47 2025-11-03 06:19:06+00:00| seen|...

CVE-2025-51089

Tenda AC8V4 V16.03.34.06 was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument mac leads to heap-based buffer overflow...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the markdown field in the info tab page. An attacker can execute arbitrary JavaScript code in the context of a user's browser by injecting malicious content. Details Cross-site scripting or XSS is a code...

WordPress plugin bSecure 安全漏洞

WordPress bSecure plugin is a plugin used to enhance the security of the website, mainly for the payment page of GiveWP to provide security features. An elevation of privilege vulnerability exists in the WordPress bSecure plugin, which stems from a lack of authorization in the orderinfo REST...

GHSA-FJXV-7RQG-78G4

creationtimestamp| type| source ---|---|--- 2025-07-18 16:45:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114875246100963364 2025-08-27 10:21:25+00:00| seen| https://gist.github.com/rz1989s/3787e596e76e4bb395efb5509a1c1804...

CVE-2025-52933

creationtimestamp| type| source ---|---|--- 2025-07-17 14:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu66c3ehqg2j...

Oracle Linux 8 : kernel (ELSA-2025-11298)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11298 advisory. - misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram CKI Backport Bot RHEL-100343 CVE-2022-49788 - media: uvcvideo: Remove dangling pointers...

kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: potential buffer overflow in handling symlinks CVE-2022-49058 kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: media: uvcvideo: Fix double free in error path...

CVE-2025-6974

creationtimestamp| type| source ---|---|--- 2025-07-15 15:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857919005997369 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-618/...

LB-LINK多款产品 访问控制错误漏洞

LB-LINK BL-AC1900 and others are products of China Bilink LB-LINK.LB-LINK BL-AC1900 is a wireless router.LB-LINK BL-AC3600 is a dual-band Gigabit wireless router that supports both 2.4GHz and 5GHz bands and is suitable for home and small office networks.LB-LINK AC2100AZ3 is a router. An access...

CVE-2025-6392

creationtimestamp| type| source ---|---|--- 2025-07-11 17:22:23+00:00| seen| Telegram/UhwjfJ-zMh0SUa47poqWpetXVasHoIlhgmIPvHLCEh1OqA...

rtnetlink: Allocate vfinfo size for VF GUIDs when supported

...

CVE-2025-38337

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2journaldirtymetadata Since handle-htransaction may be a NULL pointer, so we should change it to call ishandleabortedhandle first before dereferencing it. And the following data-race w...

AZL-64926 CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable The function atomctrlinitializemcregtable and atomctrlinitializemcregtablev22 does not check the return value of smuatomgetdatatable. If...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdspmockbinaddnameorinfo function...

CVE-2025-0141

creationtimestamp| type| source ---|---|--- 2025-07-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0141 2025-07-09 16:23:10+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/114824196232360547 2025-07-09 19:03:26+00:00| seen|...

The vulnerabilities in the page-flags.h, mmflags.h, vmcore_info.c, and hugetlb.c components of the Linux operating system’s kernel allow a hacker to cause a service failure.

The vulnerability of the page-flags.h, mmflags.h, vmcoreinfo.c, and hugetlb.c components of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wikimedia Mediawiki - IPInfo Extension 安全漏洞

Wikimedia Mediawiki - IPInfo Extension is an extension from the Wikimedia Foundation for displaying IP information. A security vulnerability exists in Wikimedia Mediawiki - IPInfo Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from improper input...