HTML Injection

librenms/librenms is vulnerable to HTML injection. The vulnerability is due to improper sanitization of the alert rule name in the Alerts Alert Rules page, which allows an attacker to inject and execute arbitrary HTML code...

BELL-CVE-2023-53853

Bulletin has no description...

CVE-2025-9056

creationtimestamp| type| source ---|---|--- 2025-12-10 04:34:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/115693406042917432 2025-12-10 04:34:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7ma7ytwwo2m 2025-12-10 04:55:26+00:00| seen|...

Malicious code in yunxohang3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...

CVE-2025-62560

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:40:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0384 2025-12-09 19:03:29+00:00| seen|...

CVE-2025-40336

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: fix hmmpfntomaporder usage Handle the case where the hmm range partially covers a huge page like 2M, otherwise we can potentially end up doing something nasty like mapping memory which is outside the range, and maybe...

CVE-2025-62867

creationtimestamp| type| source ---|---|--- 2025-12-09 15:49:07+00:00| seen| https://gist.github.com/Darkcrai86/0d50a47e3ca88182f71a450c71356d88...

CVE-2025-63035

creationtimestamp| type| source ---|---|--- 2025-12-09 15:37:45+00:00| seen| https://gist.github.com/Darkcrai86/04c7c567a05cd9e926498356a3fa94e8...

CVE-2025-63047

creationtimestamp| type| source ---|---|--- 2025-12-09 15:34:36+00:00| seen| https://gist.github.com/Darkcrai86/26aa03ccfd088fda967a3cececf56a1c...

CVE-2025-63074

creationtimestamp| type| source ---|---|--- 2025-12-09 15:22:31+00:00| seen| https://gist.github.com/Darkcrai86/576ae5b89a4d36f38919001e592e3b9c...

BELL-CVE-2025-40268

Bulletin has no description...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unreported devlinkporttypewarn source device, which could result in an incomplete warning message...

CVE-2025-14246

creationtimestamp| type| source ---|---|--- 2025-12-08 15:15:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7id4c2w252q...

EUVD-2025-201659

Malicious code in @notrainers/nobtrainer-sdk npm...

Information-Dense Reasoning for Efficient and Auditable Security Alert Triage

Security Operations Centers face massive, heterogeneous alert streams under minute-level service windows, creating the Alert Triage Latency Paradox: verbose reasoning chains ensure accuracy and compliance but incur prohibitive latency and token costs, while minimal chains sacrifice transparency a...

EUVD-2025-201589

Malicious code in blank-lib PyPI...

EUVD-2025-201479

Malicious code in elf-stats-shimmering-garland-476 npm...

MAL-2025-192328 Malicious code in elf-stats-cosy-sled-550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d003b03c0bb71b9501930d50f6b45cd0c91c9b89080bea5d69f04f0b561f3f8 The package elf-stats-cosy-sled-550 was found to contain malicious code...

WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin SMS Alert Order Notifications versions = 3.8.8...

CVE-2025-13682

creationtimestamp| type| source ---|---|--- 2025-12-05 12:42:06+00:00| seen| https://gist.github.com/Darkcrai86/545b7161b834d1a505a5def49343e154 2025-12-05 13:39:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7amdds7cl2q...