CVE-2025-58149

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.17 LTS and 12.17.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

PT-2025-45707

A flaw was found in Ansible Base when using the aws ssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality...

EUVD-2025-37021

AdForest - Classified Android App version 4.0.12 package name scriptsbundle.adforest, developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be...

[SECURITY] Fedora 42 Update: qt6-qtbase-6.9.3-1.fc42

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

[SECURITY] Fedora 42 Update: dtk6widget-6.0.27-10.fc42

Deepin Tool Kit WidgetDtkWidget provides the base widgets on Deepin...

PT-2025-48200

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.1 Description Suricata is a network IDS, IPS and NSM engine. A NULL dereference can occur in versions 8.0.0 through 8.0.1 when the entropy keyword is used in conjunction with base64 data. Disabling rules tha...

Malicious Package

Overview airbnb-base-hf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36782

Malicious code in airbnb-base-hf npm...

MAL-2025-48976 Malicious code in airbnb-base-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8ad4bb6eac712ed5b01efbb7a4e455306cdf4f9114c6d604fa49af1f3c1875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48977 Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-base-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8ad4bb6eac712ed5b01efbb7a4e455306cdf4f9114c6d604fa49af1f3c1875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36781

Malicious code in airbnb-base-typescript-prettier npm...

CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

Gitbook

Personal Pentesting Knowledge Base 👋 Welcome! This reposit...

UBUNTU-CVE-2025-40064

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

CVE-2025-40064

CVE-2025-40064 (kernel): The Linux kernel smc subsystem had a use-after-free in __pnet_find_base_ndev() triggered during connect() via sk_dst_get(dst)->dev. The root cause was not holding the device’s refcount before calling smc_pnet_find_ism_resource() (and smc_pnet_find_roce_resource()). The...