Exploit for CVE-2025-60751

CVE-2...

CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-62580 ASDA-Soft Stack-based Buffer Overflow Vulnerability

ASDA-Soft Stack-based Buffer Overflow Vulnerability...

Congratulations to the top MSRC 2025 Q3 security researchers!

Congratulations to all the researchers recognized in this quarter’sMicrosoft Researcher Recognition Programleaderboard! Thank you to everyone for your hard work and continued partnership to secure customers...

Exploit for CVE-2025-11001

CVE-2025-1...

K000156597: BIG-IP APM portal access vulnerability CVE-2025-61960

Security Advisory Description When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-61960 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allo...

CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

CVE-2025-48984

creationtimestamp| type| source ---|---|--- 2025-10-15 06:49:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m37nmxajwl2a 2025-10-15 14:05:45+00:00| seen| https://vulnerability.circl.lu/bundle/cafe2e2f-6c80-497d-93e2-f209820608e6 2025-10-15 20:50:46+00:00| seen|...

EUVD-2025-34504

Not used...

Bold Workplanner Insecure Direct Object Reference Vulnerability

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. An insecure direct object reference vulnerability exists in Bold Workplanner versions prior to 2.5.25, which stems from a lack of sufficient validation of user input, and can be...

Multi-Vendor BIOS Security Vulnerabilities (October, 2025) - Lenovo Support US

No description provided...

CVE-2025-59288 Playwright Spoofing Vulnerability

...

CVE-2025-55682

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

CVE-2025-59258

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

CVE-2024-44088

creationtimestamp| type| source ---|---|--- 2025-10-14 14:17:27+00:00| seen| https://seclists.org/oss-sec/2025/q4/36...

October 14, 2025-KB5066128 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 25H2

None None...

EUVD-2025-34151

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

PT-2025-42222

CVE-2025-42647 uv found to be a psyop side channel engine...

CVE-2025-61591

creationtimestamp| type| source ---|---|--- 2025-10-13 07:13:56+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o3dcwqc2v...

CVE-2025-27258 Ericsson Network Manager: escalation of privilege vulnerability

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...