Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status as a bitmask carrying the received sub-options, with additional information carried in several bitfields for each suboption. Zeroing the bitma...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fixed a double-free in the error path. If the uvcstatusinit function fails to allocate the inturb variable, it will free the dev-status pointer without resetting it to NULL. This causes the kfree call in...

CVE-2025-6113

creationtimestamp| type| source ---|---|--- 2025-06-16 08:37:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18425 2025-06-16 09:32:44+00:00| seen| Telegram/LkeoSpPVLo2SQbUaYktcpIv-BNCeaUg0ZAIrpwJQlcqbnWk 2025-06-16 11:14:24+00:00| seen|...

firefox: thunderbird: Script element events leaked cross-origin resource status

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Script elements loading cross-origin resources generate load and error events which can leak information enabling XS-Leaks attacks...

TencentOS Server 4: curl (TSSA-2024:0488)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0488 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2025-50143

creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgms3l2q2u...

CVE-2025-28384

creationtimestamp| type| source ---|---|--- 2025-06-13 15:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555 2025-06-13 17:04:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriw6a2svp2m...

CVE-2025-28380

creationtimestamp| type| source ---|---|--- 2025-06-13 13:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18293 2025-06-13 15:25:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555...

CVE-2025-5841

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18251 2025-06-13 05:30:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhpgs6cax2s...

CVE-2025-49589

creationtimestamp| type| source ---|---|--- 2025-06-12 21:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18232 2025-06-13 01:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhcqkr7ea23...

CVE-2025-5195

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure...

CVE-2022-4976

creationtimestamp| type| source ---|---|--- 2025-06-12 01:03:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114667698175038142 2025-06-12 01:31:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18141 2025-06-12 05:34:21+00:00| seen|...

Security update for nbdkit

This update for nbdkit fixes the following issues: Update to version 1.36.5. Security fixes: CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 232 will trigger an assertion failure and cause a denial-of-service. bsc1243108. CVE-2025-4771...

Complaint Management System /admin/updatecomplaint.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Status in the file /admin/updatecomplaint.php. An attacker can...

CVE-2025-4774

creationtimestamp| type| source ---|---|--- 2025-06-10 11:34:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17870...

PHPGurukul Restaurant Table Booking System 安全漏洞

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter searchdata in the file /check-status.php,...

GHSA-G3P6-82VC-43JH

creationtimestamp| type| source ---|---|--- 2025-06-09 21:32:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17789...

GHSA-9HJG-9R4M-MVJ7

creationtimestamp| type| source ---|---|--- 2025-06-09 19:48:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17750 2025-11-05 11:48:09+00:00| seen| https://gist.github.com/Token-Eater/a4d1d6ce67e8450e1a8f456b468e3599 2025-11-05 11:55:10+00:00| seen|...

GHSA-X8MP-CHX3-6X2P

creationtimestamp| type| source ---|---|--- 2025-06-09 12:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653505710010379 2025-06-09 13:02:03+00:00| published-proof-of-concept| Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc 2025-06-09 14:12:14+00:00| seen|...

DEBIAN-CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...