CVE-2025-53992

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTricks jet-tricks allows Retrieve Embedded Sensitive Data.This issue affects JetTricks: from n/a through = 1.5.4.1...

Europol Denies $50K Reward for Qilin Ransomware, Calls It a Scam

Europol has confirmed that a widely reported $50,000 reward for information on the Qilin ransomware group is a…...

Malicious code in etherweb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 500af99cbff4bad856e50637e3046662824ccdde4cbf8f35cfe5d6bb2c880ce8 Malicious clone of a legitimate "web3" package. During importing, a code aiming to exfiltrate private keys is executed --- Category: MALICIOUS - The campaign h...

CVE-2025-49810

creationtimestamp| type| source ---|---|--- 2025-08-21 08:11:48+00:00| seen| Telegram/PSYoVTK3v4kKjkaiGwYLFmk42ErimkMXDj76YmcCnqMtsnE...

CVE-2025-9252

A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function DisablePasswordAlertRedirect of the file /goform/DisablePasswordAlertRedirect. Executing manipulation...

CVE-2025-9252 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflow

A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function DisablePasswordAlertRedirect of the file /goform/DisablePasswordAlertRedirect. Executing manipulation...

CVE-2025-9252

The CVE affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices (firmware versions 1.0.013.001–1.2.07.001) where the DisablePasswordAlertRedirect function in /goform/DisablePasswordAlertRedirect is vulnerable to a stack-based buffer overflow when the hint parameter is manipulated. This ...

CVE-2025-9252 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflow

A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function DisablePasswordAlertRedirect of the file /goform/DisablePasswordAlertRedirect. Executing manipulation...

CVE-2025-53196

creationtimestamp| type| source ---|---|--- 2025-08-20 18:10:55+00:00| seen| Telegram/Rj-4X76-nnufjIbCA0xzEJZmkwlAf-Qp9gNKPN02vC1dMCk...

CVE-2025-55296

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS = 25.6.0 in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template...

CVE-2025-46962

creationtimestamp| type| source ---|---|--- 2025-08-20 17:10:13+00:00| seen| Telegram/zsRzhhBT9vfS9UBTzDj8VDQBZNihHR34jasv8L-9vdawA...

MAL-2025-47777 Malicious code in k7eel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83c1a6d9a050eb6c1ea689f9b98e7b7028c246c7aaf70626527025eb70fb670e Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Bao BlueRock in WordPress Plugin Popup for CF7 with Sweet Alert versions = 1.6.5...

BELL-CVE-2025-38584

Bulletin has no description...

DEBIAN-CVE-2025-38571

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tlsalertrecv due to its assumption that there is valid data in the msghdr's iterator's kvec. Instead, this patch proposes the...

AZL-66467 CVE-2025-38571 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tlsalertrecv due to its assumption that there is valid data in the msghdr's iterator's kvec. Instead, this patch proposes the...

DEBIAN-CVE-2025-38566

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tlsalertrecv due to its assumption it can read data from the msg iterator's kvec.. kTLS implementation splits TLS non-da...

CVE-2025-38571 sunrpc: fix client side handling of tls alerts

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tlsalertrecv due to its assumption that there is valid data in the msghdr's iterator's kvec. Instead, this patch proposes the...

CVE-2025-38566 sunrpc: fix handling of server side tls alerts

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tlsalertrecv due to its assumption it can read data from the msg iterator's kvec.. kTLS implementation splits TLS non-da...

Ubuntu: Security Advisory (USN-7699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...