BELL-CVE-2023-53387

Bulletin has no description...

CVE-2025-10673

creationtimestamp| type| source ---|---|--- 2025-09-18 16:29:19+00:00| seen| https://gist.github.com/Darkcrai86/cd987f8d990f50b7a0712f48c48ed881...

CVE-2025-7986 Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

CVE-2022-50353

In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not add...

CVE-2025-43305

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:26+00:00| seen| Telegram/foYrFnfA9imeput0AmDKDJ7exyE-pF-HSQFE7wHJM1KkFWM...

CVE-2025-27234

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...

CVE-2025-40690

creationtimestamp| type| source ---|---|--- 2025-09-11 12:35:42+00:00| seen| https://gist.github.com/Darkcrai86/f49e5ffff1c3ff0e98479219d5f2e1b6 2025-09-11 13:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykuquscd22i 2025-09-12 06:01:33+00:00| seen|...

CVE-2025-7491

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:39+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

WordPress Drone Media Theme <= 2.2.0 is vulnerable to Local File Inclusion

Software Drone Media Type Theme Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID eedad8a1091f Credits Bonds Required privilege Unauthenticated...

CVE-2025-39676

In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxxgetepfwdb function is supposed to return NULL on error, but qla4xxxepconnect returns error pointers. Propagating the error pointers will lead to an Oops in t...

CVE-2025-41030

creationtimestamp| type| source ---|---|--- 2025-09-02 13:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxu7li4y3k2v...

CVE-2025-9755

creationtimestamp| type| source ---|---|--- 2025-09-01 05:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxqu5cdqn72j...

CVE-2025-34520

creationtimestamp| type| source ---|---|--- 2025-08-28 15:21:52+00:00| seen| Telegram/s7Iu9fS-Whi-uZZkiAJ1F8204U8xAyiylQQUTKKuDgURnxs...

WordPress Vibes plugin <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter vulnerability

Unauthenticated SQL Injection via resource Parameter vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Vibes versions = 2.2.0...

The Biosig Project libbiosig RHS2000 parsing heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2240 The Biosig Project libbiosig RHS2000 parsing heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-48005 SUMMARY A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The Biosig Project libbiosig...

CVE-2025-38743

creationtimestamp| type| source ---|---|--- 2025-08-21 22:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwwy7xvpzt2q...

CVE-2025-9330

creationtimestamp| type| source ---|---|--- 2025-08-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-870/ 2025-09-03 01:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvhisomd22a...

CVE-2025-8943

creationtimestamp| type| source ---|---|--- 2025-08-20 20:44:15+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lwuc6m7cas2n 2025-11-11 21:02:41+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvqjorh2l 2025-11-22 21:02:35+00:00| seen|...

CVE-2025-4046

creationtimestamp| type| source ---|---|--- 2025-08-19 18:07:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwriyaalep2u...

Linux Distros Unpatched Vulnerability : CVE-2017-15868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bnepaddconnection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows loca...