CVE-2025-6491 NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...

CVE-2025-7487

creationtimestamp| type| source ---|---|--- 2025-07-12 19:49:06+00:00| seen| https://bsky.app/profile/potato.software/post/3lts4w2tptd2b...

MAL-2025-6114 Malicious code in openai-voice-agent-sdk-sample (npm)

The package communicates with a domain associated with malicious activity...

BELL-CVE-2025-38261

Bulletin has no description...

BELL-CVE-2025-38326

Bulletin has no description...

BELL-CVE-2025-38346

Bulletin has no description...

BELL-CVE-2025-38348

Bulletin has no description...

BELL-CVE-2025-38313

Bulletin has no description...

BELL-CVE-2025-38310

Bulletin has no description...

BELL-CVE-2025-38303

Bulletin has no description...

BELL-CVE-2025-38305

Bulletin has no description...

BELL-CVE-2025-38312

Bulletin has no description...

BELL-CVE-2025-38292

Bulletin has no description...

BELL-CVE-2025-38277

Bulletin has no description...

BELL-CVE-2025-38278

Bulletin has no description...

BELL-CVE-2025-38280

Bulletin has no description...

PT-2025-29329 · Unknown · Modern Bag

Name of the Vulnerable Software and Affected Versions: Modern Bag version 1.0 Description: A critical issue exists in Modern Bag 1.0, specifically within the /admin/category-list.php file. Manipulation of the idCate argument can lead to a SQL injection. This allows for remote attacks. The exploit...

GHSA-XRRQ-RRGQ-H89W static-alloc vulnerability leads to uninitialized read after allocating MemBump

The affected function, MemBump::new, would allocate memory without initializing it. Subsequently calling the created value's various allocmethods would then read and write the start of that memory as a Cell which isundefined behavior. Instead, it should zero initialize the start of the allocated...

CVE-2025-53641 Postiz allows header mutation in middleware facilitates resulting in SSRF

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery SSRF condition, which can be exploited to initiate unauthorized...

GHSA-Q745-CFQH-HCRW phpThumb is vulnerable to Command Injection through its gif_outputAsJpeg function

gifoutputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709...