CVE-2025-44884

CVE-2025-44884 affects Planet FW-WGS-804HPT firmware v1.305b241111. The vulnerability is a stack overflow in the web_sys_infoContact_post function caused by improper input length validation, with the CNVD/CNNVD entries describing potential arbitrary code execution or denial of service. Public det...

Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4013 Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

1000 Projects Daily College Class Work Report Book 注入漏洞

1000 Projects Daily College Class Work Report Book is an open source college class work report book by 1000 Projects. An injection vulnerability exists in 1000 Projects Daily College Class Work Report Book version 1.0, which originates from SQL injection due to the operation of the parameter batc...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK prior to 2025-05-19 exposes a vulnerability where an IMS call lets a subscriber read the utran-cell-id-3gpp (ECI) from the Cellular-Network-Info SIP header, potentially enabling crowdsourced cell-location inference. The issue concerns O2 UK VoLTE/IMS behavior and references ETSI TS 124 229 ...

OESA-2025-1516 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

Projectworlds Hospital Database Management System 注入漏洞

Projectworlds Hospital Database Management System is a hospital database management system from Projectworlds India. An injection vulnerability exists in Projectworlds Hospital Database Management System version 1.0, which stems from improper handling of the parameter MedID in the file...

GHSA-C8HM-H9GV-8JPJ

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

Alibaba Cloud Linux 3 : 0056: nodejs:14 (ALINUX3-SA-2021:0056)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0056 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22918: Node.js before 16.4.1,...

CVE-2025-30322

creationtimestamp| type| source ---|---|--- 2025-05-13 18:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501971768097313 2025-05-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eae6sgl2o 2025-05-13 21:24:39+00:00| seen| https://t.me/cvedetector/252...

kernel: uprobes: fix kernel info leak via "[uprobes]" vma

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "uprobes" vma xoladdvma maps the uninitialized page allocated by createxolarea into userspace. On some architectures x86 this memory is readable even without VMREAD, VMEXEC results in the same...

kernel: drm/amdgpu: fix the waring dereferencing hive

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix the waring dereferencing hive Check the amdgpuhiveinfo hive that maybe is NULL...

kernel: smb: client: Fix use-after-free of network namespace.

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. 0 The workload runs on Kubernetes, and some pods mount CIFS servers in non-root...

rsync: Info Leak via Uninitialized Stack Contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

CVE-2025-26662

creationtimestamp| type| source ---|---|--- 2025-05-13 05:30:30+00:00| seen| https://t.me/cvedetector/25154 2025-05-13 14:30:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16133...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails CVE-2022-49168 In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio CVE-2022-49413 In the Linux...

MAL-2025-191888 Malicious code in telegramdoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4cdffd265ab7e5d199258a068bf6c251370ae931fc905109bd2fb659cd7d9114 The package contains an embedded malicious executable probably blank grabber started when running the module. Probably continuation of 2025-05-pydoxing ---...

CVE-2025-46743

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15939 2025-05-12 18:26:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15958...