CVE-2025-14569

A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project w...

CVE-2025-63757

creationtimestamp| type| source ---|---|--- 2025-12-12 16:50:15+00:00| seen| https://gist.github.com/miora-sora/43c1c5616dd5b4f960a9d20296ef4833...

CVE-2025-13506

creationtimestamp| type| source ---|---|--- 2025-12-12 12:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7s56ikt5g2c...

CVE-2025-13969

creationtimestamp| type| source ---|---|--- 2025-12-12 08:23:59+00:00| seen| https://gist.github.com/Darkcrai86/265eb7c096a2c416e01abc91469fd357...

ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2025-67726 via tornado (4.5.0)

tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2025-67726 Source advisory: OSV:PYSEC-2025-267...

ppg-common (>=1.2.0, <=1.67.0) potentially affected by CVE-2025-67725 via tornado (4.5.0)

tornado PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - ppg-common =1.2.0, =1.67.0 Source cves: CVE-2025-67725 Source advisory: OSV:PYSEC-2025-266...

CVE-2025-56099

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

EUVD-2025-202732

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

EUVD-2025-202735

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restartmodules in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-36936

In GetTachyonCommand of tachyonservercommon.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36927

In GetTachyonCommand of tachyonservercommon.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-56127

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the getwanobj in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-56107

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submitwifi in file /usr/lib/lua/luci/controller/admin/commonquickconfig.lua...

CVE-2025-56099

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.07, <=2023.08), tech.powerjob:powerjob-client (4.3.3) +18 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.3)

tech.powerjob:powerjob-common MAVEN version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob =2023.07, =2023.08 -...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.02), tech.powerjob:powerjob-client (4.2.1) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.2.1)

tech.powerjob:powerjob-common MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.02 - tech.powerjob:powerjob-client 4.2.1 ...

tech.powerjob:powerjob-client (4.3.1), tech.powerjob:powerjob-official-processors (4.3.1) +17 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.1)

tech.powerjob:powerjob-common MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.3.1 - tech.powerjob:powerjob-official-processors 4.3.1 -...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.09), tech.powerjob:powerjob-client (4.3.5) +16 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.5)

tech.powerjob:powerjob-common MAVEN version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.09 - tech.powerjob:powerjob-client 4.3.5 ...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.03), org.noear:powerjob-solon-cloud-plugin (>=2.0.0-m1, <=2.5.4) +9 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.0)

tech.powerjob:powerjob-common MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.03 - org.noear:powerjob-solon-cloud-plugi...

tech.powerjob:powerjob-client (4.3.4), tech.powerjob:powerjob-official-processors (4.3.4) +15 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.4)

tech.powerjob:powerjob-common MAVEN version 4.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.3.4 - tech.powerjob:powerjob-official-processors 4.3.4 -...