22791 matches found
CVE-2025-38024
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxequeuecleanup bug Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x7d/0xa0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline printreport+0xcf/0x610...
CVE-2025-38078
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries to clear the buffer with the silence data at initialization or reconfiguration of a stream with the explicit call of sndpcmformatsetsilence with...
CVE-2025-38027
In the Linux kernel, the following vulnerability has been resolved: regulator: max20086: fix invalid memory access max20086parseregulatorsdt calls ofregulatormatch using an array of struct ofregulatormatch allocated on the stack for the matches argument. ofregulatormatch calls...
UBUNTU-CVE-2025-38013
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...
CVE-2025-5237
creationtimestamp| type| source ---|---|--- 2025-06-18 09:39:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18696 2025-06-18 11:51:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lruwzvkxzn2k...
CVE-2025-38041 clk: sunxi-ng: h616: Reparent GPU clock during frequency changes
In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes The H616 manual does not state that the GPU PLL supports dynamic frequency configuration, so we must take extra care when changing the frequency. Currently any...
CVE-2025-38028
The vulnerability CVE-2025-38028 affects the Linux kernel’s NFS/localio path (nfs_local_open_fh) due to a race condition involved when dropping the cl_uuid.lock. After the lock is released, another CPU could reclaim the just-added nfsd_file, risking use-after-free scenarios. The described fix is ...
CVE-2025-34511
creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18647 2025-06-17 19:52:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114700449431770143 2025-06-17 21:31:41+00:00| seen|...
CVE-2025-49848 Out-of-bounds Write in LS Electric GMWin 4
An out-of-bounds write vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing past the end of allocated data...
CVE-2025-49882
creationtimestamp| type| source ---|---|--- 2025-06-17 18:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt4q7weug2i...
CVE-2025-49864
Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AFS Analytics: from n/a through = 4.21...
CVE-2025-49415
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Path Traversal.This issue affects FW Gallery: from n/a through = 8.0.0...
CVE-2025-28991 WordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Evon snsevon allows PHP Local File Inclusion.This issue affects Evon: from n/a through = 3.4...
CVE-2025-49881 WordPress Responsive Blocks plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Stored XSS.This issue affects Responsive Blocks: from n/a through = 2.0.5...
CVE-2025-49444
CVE-2025-49444 concerns merkulove Reformer for Elementor with an Unrestricted Upload of File with Dangerous Type vulnerability that allows uploading a Web Shell to the web server. Affected versions are up to 1.0.5 (inclusive). Multiple sources corroborate the issue and link it to an arbitrary fil...
CVE-2025-4365
creationtimestamp| type| source ---|---|--- 2025-06-17 13:39:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18588 2025-06-17 15:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrssvjkbcf2p 2025-06-18 20:02:21+00:00| seen|...
CVE-2025-6020 Linux-pam: linux-pam directory traversal
A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions...
CVE-2025-6154
A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...
CVE-2025-49384
creationtimestamp| type| source ---|---|--- 2025-06-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-398/ 2025-06-17 21:03:11+00:00| published-proof-of-concept| Telegram/kyHnhOwYkes5uzXbChXTm6dhL73790EjFu5sgO1QQxBWSxo 2025-06-18 09:17:29+00:00| seen|...