CVE-2025-60692

creationtimestamp| type| source ---|---|--- 2025-11-13 16:49:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543412669069410 2025-11-13 19:16:40+00:00| seen| https://gist.github.com/Darkcrai86/c56f6a57c1ab442e9cdd185078d1bea0 2025-11-13 19:30:59+00:00| seen|...

CVE-2025-64718

js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...

CVE-2025-60683

creationtimestamp| type| source ---|---|--- 2025-11-13 15:53:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543191525187787 2025-11-13 17:22:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5jokawj262k...

CVE-2025-12765

creationtimestamp| type| source ---|---|--- 2025-11-13 15:04:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115542999175905854...

CVE-2025-64046

creationtimestamp| type| source ---|---|--- 2025-11-13 13:58:46+00:00| seen| https://gist.github.com/b1uel0n3/c8467f156f523fcf16dc572a34693126...

CVE-2025-64381

creationtimestamp| type| source ---|---|--- 2025-11-13 11:31:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5j2uy4uhgi2 2025-11-13 11:54:04+00:00| seen| https://gist.github.com/Darkcrai86/b7fc80fd4c669878b64d58b2edce8b0c 2025-11-13 13:07:18+00:00| seen|...

CVE-2025-64369

creationtimestamp| type| source ---|---|--- 2025-11-13 11:30:52+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5j2uatdtm22 2025-11-13 13:17:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5jatvqcxt2s...

CVE-2025-64292

creationtimestamp| type| source ---|---|--- 2025-11-13 10:19:38+00:00| seen| https://gist.github.com/Darkcrai86/3f2e71dd0871da43af5244fe91af3988 2025-11-13 11:30:30+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5j2tx6a3p22 2025-11-13 13:37:06+00:00| seen|...

CVE-2025-12681

creationtimestamp| type| source ---|---|--- 2025-11-13 08:57:27+00:00| seen| https://gist.github.com/Darkcrai86/7854059c17c1d59f88613b432993f3d0 2025-11-13 09:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5iujl3kod2q...

CVE-2025-63892

creationtimestamp| type| source ---|---|--- 2025-11-13 08:35:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59514 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI 2025-11-18 17:49:45+00:00| seen|...

CVE-2025-43383

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1003/...

CVE-2025-12536

creationtimestamp| type| source ---|---|--- 2025-11-13 04:25:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5id5a2e6nh2 2026-04-06 18:08:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-12536.ya...

CVE-2025-63645

creationtimestamp| type| source ---|---|--- 2025-11-13 00:15:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hv5xrcxe2k...

CVE-2025-13060

creationtimestamp| type| source ---|---|--- 2025-11-12 22:20:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hopclu5g62...

CVE-2025-40201

In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of tasklocktsk-groupleader in sysprlimit64 paths The usage of tasklocktsk-groupleader in sysprlimit64-doprlimit path is very broken. sysprlimit64 does gettaskstructtsk but this only protects...

CVE-2025-40180

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

GHSA-C978-WQ47-PVVW

creationtimestamp| type| source ---|---|--- 2025-11-12 21:00:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115538738234264393 2025-11-14 18:46:34+00:00| seen| https://poliverso.org/objects/0477a01e-3f4e7d7c-867ac0d13e9371e2...

CVE-2025-11366

creationtimestamp| type| source ---|---|--- 2025-11-12 20:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hjnuejbs2q 2025-11-13 06:02:05+00:00| seen| https://infosec.exchange/users/offseq/statuses/115540867427273284 2025-11-13 06:02:07+00:00| seen|...

EUVD-2025-131932

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...

CVE-2025-59089

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...