CVE-2016-15051

Nagios XI

CVE-2022-50588

creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:09+00:00| seen| Telegram/NcGnTa6YYPAreCvAozUSdE6631TbqR-C4vYiY8loOOnRJc...

CVE-2025-36137

creationtimestamp| type| source ---|---|--- 2025-10-30 19:45:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gpyptla72w...

CVE-2024-30111

creationtimestamp| type| source ---|---|--- 2025-10-30 18:56:23+00:00| seen| Telegram/MLbsfIGXWO6qEK48IrUdP4z-04xdBQ2R6pgqnXUuMUfa2Tk...

CVE-2025-12060

The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special...

GHSA-6GHX-6VPV-3WG7

creationtimestamp| type| source ---|---|--- 2025-10-30 16:29:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464061089942098...

CVE-2025-46423

creationtimestamp| type| source ---|---|--- 2025-10-30 16:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gegdzoef2n...

CVE-2025-43940

creationtimestamp| type| source ---|---|--- 2025-10-30 16:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ge5fmeax2s...

CVE-2025-5342

creationtimestamp| type| source ---|---|--- 2025-10-30 16:03:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gdlirdgm2b...

CVE-2025-43941

creationtimestamp| type| source ---|---|--- 2025-10-30 15:36:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gc3cmbjv2a...

SUSE-SU-2025:20965-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-11021: Ignore invalid date when processing cookies to prevent out-of-bounds read bsc1250562...

CVE-2025-39663

creationtimestamp| type| source ---|---|--- 2025-10-30 12:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fxf7nazu2u 2025-10-31 09:42:02+00:00| seen| https://bsky.app/profile/weippl.bsky.social/post/3m4i6qrg6if2y 2025-11-07 13:53:05+00:00| seen|...

CVE-2025-12488

creationtimestamp| type| source ---|---|--- 2025-10-30 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-981/ 2025-11-06 22:14:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ylmkmx752q 2025-11-07 01:32:06+00:00| seen|...

CVE-2025-58189

creationtimestamp| type| source ---|---|--- 2025-10-30 03:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4f2odtc2p2q 2025-10-30 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3m4fw2kakre26 2025-10-30 14:04:15+00:00| seen|...

CVE-2025-58187

creationtimestamp| type| source ---|---|--- 2025-10-30 03:36:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ezuo6vmu2s 2025-10-30 12:01:04+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3m4fw2hblri24 2025-10-30 14:04:15+00:00| seen|...

Nagios XI security vulnerabilities

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI versions prior to 5.2.4, which stems from insufficient validation ...

CVE-2025-40101

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfsloadblockgroupzoneinfo the first thing we do is to ensure that if the mapping type is not a SINGLE one and there is no RAID stripe...

PT-2025-44539

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

CVE-2025-40092

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

CVE-2025-40102

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...