IBM WebSphere Application Server（WAS）和IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server WAS and IBM WebSphere Application Server Liberty are both products of International Business Machines IBM.IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for...

quiche -- Infinite loop triggered by connection ID retirement

Quiche Releases reports: This update includes 1 security fix: High CVE-2025-7054: Infinite loop triggered by connection ID retirement. Reported by Catena cyber on 2025-08-07...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

PT-2025-32410

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.01 Description An issue exists in 7-Zip where symbolic links are not always properly handled during the extraction of archives. This flaw allows a remote attacker to use a specially crafted archive to perform arbitra...

DEBIAN-CVE-2025-54410

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

CVE-2025-7361

A code injection vulnerability due to an improper initialization check exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI using a CIN node. This vulnerability affects 32-bit NI LabVIEW 2025 Q1...

NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW 2025 Q1 and prior versions that stems from improper error handling and could lead to arbitrary code execution...

BeyondTrust Privilege Management for Windows 安全漏洞

BeyondTrust Privilege Management for Windows is a software for restricting user privileges by BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management for Windows prior to version 25.4.270.0, which originates in wmic.exe could lead to an anti-tamper protection bypass...

GHSA-8HC4-VH64-CXMJ

creationtimestamp| type| source ---|---|--- 2025-07-25 17:22:08+00:00| seen| https://gist.github.com/jporzucek/063a1bfdceba2cb9dbbdc9dfbbef6ef5 2026-01-24 21:24:31+00:00| seen| https://gist.github.com/alon710/1d19d243e6bf504868628ee2d5498eb0 2026-01-24 22:31:28+00:00| seen|...

CVE-2025-7022

creationtimestamp| type| source ---|---|--- 2025-07-25 06:36:18+00:00| seen| Telegram/pFWUNRrxhNbGotEI1dU6XjDEhw7laokRhEfMRlQvrz24AKQ...

[SECURITY] Fedora 41 Update: java-25-openjdk-25.0.0.0.32-0.1.ea.fc41

The OpenJDK 25 runtime environment...

CVE-2022-28908

creationtimestamp| type| source ---|---|--- 2025-07-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw54xgs52h 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f004326b-3257-4ea8-ad62-3479a1856388...

CVE-2025-54447

creationtimestamp| type| source ---|---|--- 2025-07-23 08:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumkib7pou2j 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-663/...

CVE-2025-6261

creationtimestamp| type| source ---|---|--- 2025-07-23 07:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhbd2ljf2d...

CVE-2025-2301

creationtimestamp| type| source ---|---|--- 2025-07-21 12:32:15+00:00| seen| Telegram/R5qNJgoXRnaopbEks7cOd0eCOIHM6nbycrZZiTFYkaIhEE...

SUSE CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

SUSE CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

CVE-2025-7805

creationtimestamp| type| source ---|---|--- 2025-07-18 22:36:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubj352aow2i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

7-Zip 安全漏洞

7-Zip is a compression software from the 7-Zip open source. A security vulnerability exists in versions prior to 7-Zip 25.0.0 that originates from writing a zero value out of the heap buffer in the RAR5 handler, which could result in memory corruption and a denial of service...

IBM WebSphere Application Server和IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server WAS and IBM WebSphere Application Server Liberty are both products of International Business Machines IBM.IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for...