DEBIAN-CVE-2025-22080

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The "deoff" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINTMAX - 16 then the check does...

UBUNTU-CVE-2025-22081

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeofstruct NTFSDE" addition can have an integer wrapping issue. Fix it by using sizeadd...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an integer overflow risk in ntfs3 on 32-bit systems, which could lead to out-of-bounds access...

WAGO 输入验证错误漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is specifically designed to operate electronic systems for digital computing applications in industrial environments. An input validation error vulnerability exists in WAGO that originates from a low-privileged...

X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents

Multi-turn interactions with language models LMs pose critical safety risks, as harmful intent can be strategically spread across exchanges. Yet, the vast majority of prior work has focused on single-turn safety, while adaptability and diversity remain among the key challenges of multi-turn...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite product from the U.S.-based Microsoft Corporation Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A resource management error vulnerability exists in Microsoft Office. An attacker can...

CVE-2024-12410 Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection

The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

UBUNTU-CVE-2025-3083

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to...

CVE-2025-3083 Malformed MongoDB wire protocol messages may cause mongos to crash

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to...

CVE-2023-0470

creationtimestamp| type| source ---|---|--- 2025-03-31 17:30:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9710...

CVE-2025-31122

creationtimestamp| type| source ---|---|--- 2025-03-31 17:16:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258175577877862 2025-03-31 17:16:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258175577877862 2025-03-31 17:30:51+00:00| published-proof-of-concept|...

CVE-2025-31591

creationtimestamp| type| source ---|---|--- 2025-03-31 14:32:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9666...

CVE-2025-31543

creationtimestamp| type| source ---|---|--- 2025-03-31 14:32:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9654...

CVE-2025-28091

creationtimestamp| type| source ---|---|--- 2025-03-28 21:28:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9465 2025-03-29 00:26:42+00:00| seen| https://t.me/cvedetector/21468 2025-03-31 23:48:49+00:00| seen|...

SUSE CVE-2023-52933

In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem exposes two flaws in the handling and sanity checking of the xattrids count in the filesystem. Both of these flaws cause computation...

DEBIAN-CVE-2025-26619

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In vega 5.30.0 and lower and in vega-functions 5.15.0 and lower , it was possible to call JavaScript functions from the Vega expression language that were not meant to be...

Vega 安全漏洞

Vega is a Javscript-based software from the Vega team that can be used to create interactive visual displays. The software can describe data visualizations using JSON format and generate interactive views using HTML5 Canvas or SVG. A security vulnerability exists in Vega versions prior to 5.32.0...

CVE-2025-27552

The DBIx::Class::EncodedColumn Perl module (versions until 0.00032 ) is vulnerable because it uses the non-cryptographically secure rand() function to salt password hashes within the Crypt/Eksblowfish/Bcrypt.pm file. This leads to insufficient entropy (CWE-331) and the use of cryptographically we...

CVE-2025-2532 Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability

Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicio...

CVE-2025-2109

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.30.15 via the init function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...