CVE-2025-8392

The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2024-47120

creationtimestamp| type| source ---|---|--- 2025-09-13 04:38:17+00:00| seen| Telegram/ZA3Us7laJHw8JkYcP9Bi2svB3zSswPyuyfaYugVYArxuxI...

CVE-2025-10331

creationtimestamp| type| source ---|---|--- 2025-09-13 02:46:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyor5vmum42t...

CVE-2025-10325

creationtimestamp| type| source ---|---|--- 2025-09-12 23:37:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyogluqps52i...

CVE-2025-10328

creationtimestamp| type| source ---|---|--- 2025-09-12 23:32:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyogcwcomr2c...

CVE-2025-45585

creationtimestamp| type| source ---|---|--- 2025-09-12 22:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyodtzkk4o2f...

CVE-2025-39797

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

CVE-2025-39793

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

CVE-2025-39796

In the Linux kernel, the following vulnerability has been resolved: net: lapbether: ignore ops-locked netdevs Syzkaller managed to trigger lock dependency in xsknotify via registernetdevice. As discussed in 0, using registernetdevice in the notifiers is problematic so skip adding lapbeth for...

CVE-2025-10318

creationtimestamp| type| source ---|---|--- 2025-09-12 15:15:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lynkkpwv6h2c...

CVE-2025-8575

creationtimestamp| type| source ---|---|--- 2025-09-12 07:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymropei5x2m 2025-09-12 08:05:55+00:00| seen| https://gist.github.com/Darkcrai86/e5daee8e4cdb760338d43fdae91c6961...

CVE-2025-55996

creationtimestamp| type| source ---|---|--- 2025-09-12 04:26:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51229 2025-09-12 04:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51230 2025-09-12 09:00:05+00:00| published-proof-of-concept|...

CVE-2025-10298

creationtimestamp| type| source ---|---|--- 2025-09-12 00:46:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lylzxjflkn2c...

CVE-2025-59053

creationtimestamp| type| source ---|---|--- 2025-09-11 22:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyltcj6gxj2c 2025-09-12 01:31:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lym4j67b642d...

CVE-2025-23342

creationtimestamp| type| source ---|---|--- 2025-09-11 20:48:37+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lylmoooi2c2r...

CVE-2025-54111

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

CVE-2025-39753

In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migratefolio in gfs2rgrp,metaaops Clears up the warning added in 7ee3647243e5 "migrate: Remove call to -writepage" that occurs in various xfstests, causing "something found in dmesg" failures. 341.136573 gfs2metaaops...

CVE-2025-39769

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdevassertlocked in bnxtfreentpfltrs. The lock should be held during normal run-time but the assert will be triggered see below during bnxtremoveon...

CVE-2025-39786

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7173: fix channels index for syscalibmode Fix the index used to look up the channel when accessing the syscalibmode attribute. The address field is a 0-based index same as scanindex that it used to access the channel ...

CVE-2025-39783

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a listdel on the epfgroup field of struct pciepfdriver in pciepfremovecfs is not correct as this field is a list head, not a list entry. This listdel call triggers a KASA...