24697 matches found
CVE-2022-50638
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMP...
PT-2025-50292
Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...
Linux Distros Unpatched Vulnerability : CVE-2025-40340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kern...
CVE-2025-65573
Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...
PT-2025-49696
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the ath11k module related to handling disconnected Wi-Fi peers. Specifically, a failure log occurs when attempting to find a peer with an ID of ...
PT-2025-49629
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to an out-of-bounds read within the adp5061 get chg type function. Specifically, the ADP5061 CHG STATUS 1 CHG STATUS value is masked with 0x07...
CVE-2025-65572
AllskyTeam AllSky v2024.12.06_06 is affected by a Cross Site Scripting (XSS) flaw in the allskySettings.php handler. The vulnerability arises from parameters (config, filename, extratext) that are processed by showMessages() in status_messages.php, allowing injected scripts to be printed and exec...
CVE-2025-65573
Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...
GHSA-WPQC-H9WP-CHMQ
creationtimestamp| type| source ---|---|--- 2025-12-08 23:41:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115686590469006989...
CVE-2023-53752
In the Linux kernel, the following vulnerability has been resolved: net: deal with integer overflows in kmallocreserve Blamed commit changed: ptr = kmallocsize; if ptr size = ksizeptr; size = kmallocsizeroundupsize; ptr = kmallocsize; This allowed various crash as reported by syzbot 1 and Kyle...
CVE-2025-65231
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...
CVE-2025-65804
creationtimestamp| type| source ---|---|--- 2025-12-08 17:46:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115685195052401612 2025-12-08 19:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7iskxtus72x...
CVE-2025-14224
creationtimestamp| type| source ---|---|--- 2025-12-08 13:56:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684291115598440...
CVE-2025-14225
creationtimestamp| type| source ---|---|--- 2025-12-08 13:56:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684291115598440...
CVE-2025-26487
creationtimestamp| type| source ---|---|--- 2025-12-08 09:03:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/115683138567825457 2025-12-08 09:03:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7hocvq45u24 2025-12-08 10:55:26+00:00| seen|...
CVE-2025-14186
A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...
WordPress Fluent Forms plugin <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id vulnerability
Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submissionid vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin FluentForm versions = 6.1.7...
CVE-2025-14210
creationtimestamp| type| source ---|---|--- 2025-12-08 07:10:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7hhydpb532s...