Rewiring Democracy is Coming Soon

My latest book, Rewiring Democracy: How AI Will Transform Our Politics, Government, and Citizenship , will be published in just over a week. No reviews yet, but you can read chapters 12 and 34 of 43 chapters total. You can order the book pretty much everywhere, and a copy signed by me here. Pleas...

CVE-2025-39964

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Disallow concurrent writes in afalgsendmsg Issuing two writes to the same afalg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencie...

CVE-2025-57202

creationtimestamp| type| source ---|---|--- 2025-10-13 13:14:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/55311...

QGIS QWC2 Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

CVE-2025-11671

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:42+00:00| seen| Telegram/424jmxFnmD3-QZBx3TYLc8blE71ZYgdkUCSrnxvFWI4FCEo...

CVE-2025-10552

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:37+00:00| seen| Telegram/BfNOQEW6DeJUKOC7RMZRp7ey-OCqnqNoJBCAFbDAuT0s...

CVE-2025-10557

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:35+00:00| seen| Telegram/WM72dKC9JfGAo4CSStxbpLJ2VPHuwP9d0ucsocDyuRJiGyg...

CVE-2025-61592

creationtimestamp| type| source ---|---|--- 2025-10-13 07:14:20+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o43aeus2v...

CVE-2025-61593

creationtimestamp| type| source ---|---|--- 2025-10-13 07:14:20+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o43aeus2v...

CVE-2025-11649

creationtimestamp| type| source ---|---|--- 2025-10-13 06:03:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m32k5sehoi2a...

CVE-2025-31995

creationtimestamp| type| source ---|---|--- 2025-10-13 05:16:00+00:00| seen| Telegram/hhP5M9-XyBsDhkH5Vsgo1X2s5smFSSIeLvWLsQKIaVz70...

CVE-2025-24528

creationtimestamp| type| source ---|---|--- 2025-10-13 02:31:28+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cbeeek25...

Aykome License Tracking System security vulnerabilities

Aykome License Tracking System is a license management system from Aykome Turkey. A security vulnerability exists in Aykome License Tracking System versions prior to 06.10.2025, which stems from improper neutralization of a special element and could lead to an SQL injection attack...

CVE-2022-25844

creationtimestamp| type| source ---|---|--- 2025-10-12 21:00:05+00:00| published-proof-of-concept| Telegram/wZtUpGBhAyZXbyy1Dz1CYSOkIDUJFs2hLHFbC2-fAsAzWE 2025-10-14 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m36mtqs2ss2p 2026-01-14 18:54:12+00:00| seen|...

CVE-2025-11643

creationtimestamp| type| source ---|---|--- 2025-10-12 20:16:34+00:00| seen| Telegram/Yy4fMccnVjihuDJQNcZhVu7TyJxXBgqcbVANSvvHGTR6ClQ...

CVE-2017-5941

creationtimestamp| type| source ---|---|--- 2025-10-12 15:00:06+00:00| published-proof-of-concept| Telegram/nHH3EPNLC7cR6YqxoW514LvTLwhWMDWIdjARrLyJXH8zbM 2026-07-29 12:00:32+00:00| seen| https://t.me/CVEhub/12576 2026-07-30 00:00:57+00:00| seen| https://t.me/CVEhub/12576 2026-07-31 00:00:08+00:0...

CVE-2025-58287

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:57+00:00| seen| Telegram/kmjuKfn41MRsce8zAIF3MLxJ0ho7Ipf0hb9FwZthKDgLD-c...

CVE-2025-58292

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:17+00:00| seen| Telegram/Z7udfdmVUkpFZL1u5aAyuczZD5o6XUVDt4VHy1BtwNups...

WordPress Date counter plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Date counter versions = 2.0.3...

CVE-2025-11555

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendarofevents.php. The manipulation of the argument datestart results in sql injection. The attack may be launched remotely. The exploit is now public and may be use...