Microsoft Patch Tuesday for December 2025 — Snort rules and prominent vulnerabilities

The Patch Tuesday for December of 2025 includes 57 vulnerabilities, including two that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the two "critical" vulnerabilities is "less likely." CVE ‑2025‑62562 i...

CVE-2025-62555 Microsoft Word Remote Code Execution Vulnerability

...

Exploit for Deserialization of Untrusted Data in Facebook React

Hunting for CVE-2025-55182 Using Open Source Intelligenc...

CVE-2025-40335

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and rejecting for the invalid userq request at the IOCTLs first place...

CVE-2025-63025

creationtimestamp| type| source ---|---|--- 2025-12-09 15:39:47+00:00| seen| https://gist.github.com/Darkcrai86/bbc8d4387a9b7424bc26ba53b8e9678d...

CVE-2025-63063

creationtimestamp| type| source ---|---|--- 2025-12-09 15:28:13+00:00| seen| https://gist.github.com/Darkcrai86/88accb1a324f19e9098dd302af2ddebb...

November 11, 2025—KB5068865 (OS Build 22631.6199)

None None...

EUVD-2025-201831

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improper validation of user-supplied input. An attacker could exploit this vulnerability by using a specially crafted URL to redirect the...

Fedora 41 : abrt (2025-ed228a4b71)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ed228a4b71 advisory. Fix CVE-2025-12744 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft USA that is used to implement features such as network routing, virtual private networks VPNs and dial-up connections. A remote code execution vulnerability exists in Microsoft Windows Routing and Remote Acces...

CVE-2025-40305

No description is available for this CVE...

CVE-2025-40305

In the Linux kernel, the following vulnerability has been resolved: 9p/transfd: p9fdrequest: kick rx thread if EPOLLIN p9readwork doesn't set Rworksched and doesn't do scheduleworkm-rq if listempty&m-reqlist. However, if the pipe is full, we need to read more data and this used to work prior to...

CVE-2025-40307

In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking this. The problem ...

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill

A sprawling academic cheating network turbocharged by Google Ads that has generated nearly $25 million in revenue has curious ties to a Kremlin-connected oligarch whose Russian university builds drones for Russia's war against Ukraine. The Nerdify homepage. The link between essay mills and Russia...

Malicious code in evil-rce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74a74a4133ed8082eba8452bb59a82dcf6975e1e8c4d6630a47088c17d6b6cca Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

CVE-2025-12673

creationtimestamp| type| source ---|---|--- 2025-12-06 06:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7cg6zgvdu2q 2025-12-06 08:33:08+00:00| seen| https://infosec.exchange/users/offseq/statuses/115671694538269344 2025-12-06 08:33:10+00:00| seen|...

CVE-2025-13512

creationtimestamp| type| source ---|---|--- 2025-12-05 09:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7a5tc3uzo2w 2025-12-05 12:56:44+00:00| seen| https://gist.github.com/Darkcrai86/d29ecf078c69ecaaa2400102f48a8406...

EUVD-2025-201314

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

EUVD-2025-201313

A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected by this vulnerability is the function getMemberById of the file /mall-ums/app-api/v1/members/. The manipulation of the argument memberId leads to improper access controls. The attack is possible to be carried out...

Linux Distros Unpatched Vulnerability : CVE-2025-12385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS,...