RUSTSEC-2025-0152 `finch_cli_rust` was removed from crates.io for malicious code

This attempts to typosquat the existing crate finchcli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reportin...

CVE-2025-59391

creationtimestamp| type| source ---|---|--- 2025-12-08 20:02:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7it4upexs2n...

CVE-2025-65795

creationtimestamp| type| source ---|---|--- 2025-12-08 19:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7istwc55r2s...

CVE-2025-14261

creationtimestamp| type| source ---|---|--- 2025-12-08 19:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7irz2ypcw26...

GCVE-1-2025-0034

creationtimestamp| type| source ---|---|--- 2025-12-08 13:50:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684266346827300...

CVE-2025-66324

creationtimestamp| type| source ---|---|--- 2025-12-08 11:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7hvwi46z22s...

CVE-2025-14216

creationtimestamp| type| source ---|---|--- 2025-12-08 07:44:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7hjvux7t426...

CVE-2025-14221

creationtimestamp| type| source ---|---|--- 2025-12-08 07:36:16+00:00| seen| https://bsky.app/profile/potato.software/post/3m7hjgu65aw2h...

CVE-2023-53764

creationtimestamp| type| source ---|---|--- 2025-12-08 03:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7h427wfnb2s 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-53767

creationtimestamp| type| source ---|---|--- 2025-12-08 03:22:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7h3beqosp2n 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-53747

In the Linux kernel, the following vulnerability has been resolved: vcscreen: reload load of struct vcdata pointer in vcswrite to avoid UAF After a call to consoleunlock in vcswrite the vcdata struct can be freed by vcportdestruct. Because of that, the struct vcdata pointer must be reloaded in th...