CVE-2025-38103

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhidparse Update struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently...

Fedora 42 : thunderbird (2025-a52491bdd9)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a52491bdd9 advisory. Update to 128.11.0 https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/...

CVE-2025-53358

creationtimestamp| type| source ---|---|--- 2025-07-02 17:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsypjhetno2k...

CVE-2025-20307

creationtimestamp| type| source ---|---|--- 2025-07-02 17:10:58+00:00| seen| Telegram/uJaXG3qAiRZgQViuHLb6dBpKrZljBrgmoM1hXBvyz4ikq4...

CVE-2025-6725

CVE-2025-6725 is a Cross-Site Scripting (XSS) vulnerability reported in the PdfViewer component across Progress Telerik UI products (e.g., UI for ASP.NET Core/Blazor/ASP.NET MVC, Kendo UI for React/Angular/jQuery). The root cause, as described in the initial materials, is insufficient validation ...

编号撤回

Google Chrome is a web browser from Google, Inc USA. This CVE number has been withdrawn...

编号撤回

Google Chrome is a web browser from Google, Inc USA. This CVE number has been withdrawn...

WordPress plugin Ads Pro 跨站请求伪造漏洞

WordPress Ads Pro is a multi-purpose ad management plugin, mainly used for flexible management of ad space in WordPress websites, supporting banner ad display, billing mode settings and user-friendly ad placement solutions. WordPress ads pro has a cross-site request forgery vulnerability, which...

CVE-2025-49483

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr069uci.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49491

creationtimestamp| type| source ---|---|--- 2025-07-01 11:09:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20017 2025-07-01 12:26:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:04:40+00:00| seen|...

CVE-2024-46992

creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19995 2025-07-01 07:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsv6s6hn7c2a 2025-08-06 13:54:20+00:00| seen|...

CVE-2025-53005

creationtimestamp| type| source ---|---|--- 2025-07-01 01:07:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19993 2025-07-01 04:35:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsuuq34p5r2i...

Fedora 42 : python-pycares (2025-31830e02b0)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-31830e02b0 advisory. 4.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but ha...

CVE-2025-47871

Mattermost requires update: versions 10.5.x ≤ 10.5.5, 9.11.x ≤ 9.11.15, 10.8.x ≤ 10.8.0, 10.7.x ≤ 10.7.2, 10.6.x ≤ 10.6.5 fail to validate channel membership when retrieving playbook run metadata. This allows authenticated users who are playbook members but not channel members to access sensitive...

CVE-2023-29113

The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating...

CVE-2023-28912

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2025-6886

creationtimestamp| type| source ---|---|--- 2025-06-30 04:25:08+00:00| seen| https://bsky.app/profile/potato.software/post/3lssdour6tf2p 2025-06-30 04:54:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19899 2025-06-30 07:00:34+00:00| seen|...

CVE-2025-53076

creationtimestamp| type| source ---|---|--- 2025-06-30 02:55:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19895 2025-06-30 07:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsso4xuz472a...

CVE-2025-6854

creationtimestamp| type| source ---|---|--- 2025-06-29 08:53:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19857 2025-06-29 12:45:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqp5wvugi2v...

CVE-2025-6847

creationtimestamp| type| source ---|---|--- 2025-06-29 05:56:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19851 2025-06-29 08:44:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqbqggvb72m...