EUVD-2025-35392

Cross-Site Request Forgery CSRF vulnerability in Dmitry V. CEO of "UKR Solution" UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Cross Site Request Forgery.This issue affects UPC/EAN/GTIN Code Generator: from n/a through = 2.0.2...

CVE-2023-53722 md: raid1: fix potential OOB in raid1_remove_disk()

In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1removedisk If rddev-raiddisk is greater than mddev-raiddisks, there will be an out-of-bounds in raid1removedisk. We have already found similar reports as follows: 1 commit d17f744e883b...

CVE-2023-53722

CVE-2023-53722 refers to a Linux kernel vulnerability in the MD RAID1 code path where an OOB can occur in raid1_remove_disk() if rddev->raid_disk exceeds mddev->raid_disks. The fix is described as validating the number/index before use. Connected advisories from OpenVAS/Nessus listings (Eul...

CVE-2022-50558 regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode

In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Use the new numconfigregs property in regmapaddirqchipfwnode Commit faa87ce9196d "regmap-irq: Introduce config registers for irq types" added the numconfigregs, then commit 9edd4f5aee84 "regmap-irq: Deprecate type...

Ubuntu: Security Advisory (USN-7829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:3677-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

编号撤回

ring is a library by Brian Smith, an individual developer. This CVE number has been withdrawn...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check the validity of the number variable, which could result in an out-of-bounds write...

CVE-2025-62591

...

CVE-2025-62287

...

CVE-2025-53065

...

CVE-2025-53058

...

CVE-2025-53044

...

CVE-2025-53043

...

EUVD-2022-54709

In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...

CVE-2025-5555

creationtimestamp| type| source ---|---|--- 2025-10-20 07:34:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mciklpbv2a...

CVE-2025-40004

creationtimestamp| type| source ---|---|--- 2025-10-20 07:18:07+00:00| seen| https://gist.github.com/Darkcrai86/6fec47d98f714f309afe3a489c3ff8ad...

CVE-2025-56801

creationtimestamp| type| source ---|---|--- 2025-10-19 03:00:05+00:00| published-proof-of-concept| Telegram/8nM03Hy1pfJWfEIa0g2-4Thr39zfhDpEe0Vm6CK6uASuGo 2025-10-21 19:43:09+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115413862888090663 2025-10-21 20:21:36+00:00| seen|...

ECHO-6180-7667-AC17

Bulletin has no description...

New Tech Support Scam Uses Microsoft Logo to Fake Browser Lock, Steal Data

The Cofense Phishing Defense Centre warns of a new tech support scam using Microsoft’s brand to lock browsers and steal data. Learn how the attack uses fake 'payment lures' and urgent security alerts to trick victims into calling a fraudulent support number...