CVE-2025-23130

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2746! CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted...

CVE-2025-22074

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

CVE-2025-22097

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

CVE-2025-22026

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

WordPress Rescue Shortcodes plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Rescue Shortcodes versions = 3.1...

CVE-2025-39585

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12035 2025-04-16 14:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcckwej2z 2025-04-16 16:02:56+00:00| seen| https://t.me/cvedetector/23098...

CVE-2025-27569

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...

CVE-2025-32021 Weblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext

Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code...

CVE-2025-31357

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-32941

creationtimestamp| type| source ---|---|--- 2025-04-15 04:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtaycjrde2h 2025-04-15 07:24:04+00:00| seen| https://t.me/cvedetector/22908...

HPESBCR04838 rev.1 - HPE Cray Operating System, Local Denial Of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray Supercomputing Operating System Software prior to cos-base-3.2 - https://support.hpe.com/hpesc/docDisplay?docLocale=enUS&docId=a00146084enus CVSS Scores: | CVE | CVSS...

CVE-2025-24797

creationtimestamp| type| source ---|---|--- 2025-04-14 23:53:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11732 2025-04-15 00:36:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114339178869394068 2025-04-15 02:38:09+00:00| seen|...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm giving an online talk on AI and trust for the Weizenbaum Institute on April 24, 2025 at 2:00 PM CEST 8:00 AM ET. The list is maintained on this page...

CVE-2025-3569

Affected software: JamesZBL/code-projects db-hospital-drug 1.0. The vulnerability resides in ShiroConfig.java and involves improper authorization. Exploitation is described as possible remotely; the exploit has been publicly disclosed. Documented impact is limited to authorization control, with n...

Medium: ruby3.2

Issue Overview: In the URI gem before 1.0.3 for Ruby, the URI handling methods URI.join, URImerge, URI+ have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host. CVE-2025-27221 Affected Packages: ruby3.2 Issue Correction: Run dnf update...

CVE-2024-01021

creationtimestamp| type| source ---|---|--- 2025-04-13 23:57:38+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqatnjjms2i 2025-04-13 23:58:30+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqav6wih22i 2025-04-14 00:03:30+00:00| seen|...

CVE-2025-3542

creationtimestamp| type| source ---|---|--- 2025-04-13 23:52:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11570 2025-04-14 02:17:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmqioi4o4m2b 2025-04-14 02:30:17+00:00| published-proof-of-concept|...

CVE-2022-46582

creationtimestamp| type| source ---|---|--- 2025-04-11 22:51:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11498...

CVE-2024-48573

creationtimestamp| type| source ---|---|--- 2025-04-11 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4bwnpa2t...

CVE-2025-21597

An Improper Check for Unusual or Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer to cause Denial of Service DoS. On all Junos OS and Junos OS Evolved platforms, when BGP...