PT-2025-27951

Name of the Vulnerable Software and Affected Versions: OP-TEE version 4.5.0 Description: OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. An attacker can trigger a panic in a TA that...

CVE-2025-38110 net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 clause 45 mdiobus, there is no verificati...

AlmaLinux 9 : libtasn1 (ALSA-2025:7077)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7077 advisory. libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS CVE-2024-12133 Tenable has extracted the preceding description block directly from t...

GHSA-3M86-C9X3-VWM9

creationtimestamp| type| source ---|---|--- 2025-07-02 14:54:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784211147922979...

GHSA-XW5Q-G62X-2QJC

creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19995 2025-07-01 03:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775953190071346...

GHSA-RVQX-WPFH-MFX7

creationtimestamp| type| source ---|---|--- 2025-06-29 22:26:18+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/114769000988969113 2025-06-29 23:19:07+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/18635...

CVE-2025-6859 SourceCodester Best Salon Management System pro_sale.php sql injection

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/prosale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. T...

CVE-2015-0842

yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass...

USN-7595-3: Linux kernel (Raspberry Pi Real-time) vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

Universal Jailbreak Suffixes Are Strong Attention Hijackers

We study suffix-based jailbreaks$\unicodex2013$a powerful family of attacks against large language models LLMs that optimize adversarial suffixes to circumvent safety alignment. Focusing on the widely used foundational GCG attack Zou et al., 2023, we observe that suffixes vary in efficacy: some...

BELL-CVE-2025-38053

Bulletin has no description...

GHSA-24WV-6C99-F843

creationtimestamp| type| source ---|---|--- 2025-06-20 17:44:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114716930881228437 2025-06-20 17:46:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19004...

BP Monitoring Management System registration.php file SQL Injection Vulnerability

BP Monitoring Management System is a bp monitoring management system. BP Monitoring Management System suffers from a SQL injection vulnerability that originates from improper filtering of the emailid parameter in the registration.php file. An attacker can exploit this vulnerability by manipulatin...

Grub2 FilesystemHandler DoS

The vulnerability of the fs FilesystemHandler component in the Grub operating system is related to writing beyond the boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-50167

In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit overflow when accessing ARRAY map element If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elemsize are u32. Fix this everywhere by forcing 64-bit...

CVE-2025-38082

CVE-2025-38082 refers to a Linux kernel vulnerability in gpio: virtuser where an out-of-bounds write could occur if a caller wrote more characters than the destination buffer could hold in simple_write_to_buffer. The issue is mitigated by a fix that truncates the input size to the available buffe...

Chamilo LMS SQL Injection

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...

GHSA-GRMH-WW4V-5CGJ

creationtimestamp| type| source ---|---|--- 2025-06-17 22:57:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114701175434297633 2025-06-17 23:42:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18681...

CVE-2025-49175

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...

CVE-2025-49175 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...