AMD SMM Vulnerabilities February 2025 Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD client platform firmware components, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerabilities. HP has...

CVE-2025-0649

creationtimestamp| type| source ---|---|--- 2025-05-06 21:16:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462962265876830 2025-05-06 22:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojwintqaq24 2025-05-07 00:14:11+00:00| seen|...

CVE-2025-27533

creationtimestamp| type| source ---|---|--- 2025-05-06 13:39:27+00:00| seen| https://seclists.org/oss-sec/2025/q2/105 2025-05-06 16:05:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lojb73h7i62v 2025-05-07 09:23:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15288...

Security Advisory 0117

Security Advisory 0117 . CSAF PDF Date: May 6, 2025 Revision | Date | Changes ---|---|--- 1.0 | May 6, 2025 | Initial release 1.1 | May 20, 2025 | Updated affected Arista products Updated mitigation option 3 The CVE-ID tracking this issue: CVE-2025-0936 CVSSv3.1 Base Score: 6.5...

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows a hacker to trigger a service failure.

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Exploit for Code Injection in Langflow

CVE-2025-3248 Langflow is a low-code platform primarily us...

CVE-2023-53144

In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...

CVE-2023-53144

In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...

CVE-2023-53144

CVE-2023-53144 concerns the Linux kernel erofs subsystem. The connected documentation describes an identified issue where kunmap could be applied to incorrect pages during LZMA decompression on HIGHMEM platforms, leading to a NULL pointer dereference in z_erofs_lzma_decompress and related call ch...

CVE-2023-53144 erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms

In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...

CVE-2023-53144 erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms

In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...

CVE-2025-2605

creationtimestamp| type| source ---|---|--- 2025-05-02 13:15:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14477 2025-05-02 13:38:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114438509930269915 2025-05-02 14:45:07+00:00| seen|...

AZL-69668 CVE-2025-23155 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinityhint In stmmacrequestirqmultimsi, a pointer to the stack variable cpumask is passed to irqsetaffinityhint. This value is stored in irqdesc-affinityhint, but once stmmacrequestirqmultim...

CVE-2025-30392

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 19:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642482723437 2025-04-30 20:30:45+00:00| seen|...

CVE-2025-21416

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 17:36:04+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lo2dgyrzrv2l 2025-04-30 19:48:32+00:00| seen|...

CVE-2025-46342

creationtimestamp| type| source ---|---|--- 2025-04-30 15:48:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698692598891 2025-04-30 15:59:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427741773438031 2025-04-30 16:30:35+00:00| seen|...

CVE-2025-4120

creationtimestamp| type| source ---|---|--- 2025-04-30 14:13:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14040 2025-04-30 15:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698527955636 2025-04-30 16:30:21+00:00|...

CVE-2025-32444

creationtimestamp| type| source ---|---|--- 2025-04-30 01:07:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114424232674350194 2025-04-30 01:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114424395593995699 2025-04-30 03:30:38+00:00|...

CVE-2025-29906

creationtimestamp| type| source ---|---|--- 2025-04-29 23:48:13+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114423922060759169 2025-04-29 23:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw3fwmw24 2025-04-30 01:00:20+00:00| published-proof-of-concept...

CVE-2025-4076

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13886 2025-04-29 19:00:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114422791020342282 2025-04-29 19:50:43+00:00| seen|...