CVE-2025-40256

In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrmstatedeletetunnel at destroy time for states that were never added In commit b441cf3f8c4b "xfrm: delete x-tunnel as we delete x", I missed the case where state creation fails between full initialization...

CVE-2025-40240

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk-skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk-skb can only be NULL if chunk-headskb is not. Check for fraglist instead...

CVE-2025-40229

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix potential memory leak by cleaning opsfilter in damondestroyscheme Currently, damondestroyscheme only cleans up the filter list but leaves opsfilter untouched, which could lead to memory leaks when a scheme is...

CVE-2025-40263

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...

CVE-2025-40253

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpcrcvdsweepreqmpcginfo' is called conditionally from function 'ctcmpcunpackskb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpcunpackskb' frees it...

CVE-2025-20383

creationtimestamp| type| source ---|---|--- 2025-12-04 14:50:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m767t3uk6e2b...

CVE-2025-14005

creationtimestamp| type| source ---|---|--- 2025-12-04 14:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m766wkf5eb2s...

CVE-2025-13802

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

CLSA-2025-1764677929 libsoup: Fix of 2 CVEs

CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...

CVE-2025-13373

creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-07 2025-12-05 02:46:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77hua4ufv2s...

CVE-2025-66238

creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-05 2025-12-05 02:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77hftnjk426...

CVE-2025-62173

creationtimestamp| type| source ---|---|--- 2025-12-04 00:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74r4elnsk2n...

Oracle Linux 10 : libsoup3 (ELSA-2025-21032)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21032 advisory. 3.6.5-6 - Fix integer overflow in date/time parsing 3.6.5-5 - Bump revision number 3.6.5-4 - Fix several CVEs Tenable has extracted the preceding...

CVE-2025-5518

creationtimestamp| type| source ---|---|--- 2025-12-03 23:59:39+00:00| seen| https://infosec.exchange/users/timbmachine/statuses/115658343985215542 2025-12-04 13:57:58+00:00| seen| https://mstdn.social/users/jschauma/statuses/115661647115099251 2025-12-04 18:02:24+00:00| seen|...

EUVD-2025-201107

Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v1228, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe in the function main.cpp, which can lead to potential information leakage and crash...

EUVD-2025-201104

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...

CVE-2025-65096

creationtimestamp| type| source ---|---|--- 2025-12-03 21:19:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74f3js7lf2s...

GHSA-9R3W-4J8Q-PW98

creationtimestamp| type| source ---|---|--- 2025-12-03 20:39:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657563853838944 2025-12-08 18:48:31+00:00| published-proof-of-concept| Telegram/KhP08QO7METb6I7HjASrP1eXHc6jEsXOl-UrWhwWcwwg 2025-12-08 18:48:33+00:00|...

CVE-2025-12385

Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component in Qt Quick...

WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Order Delivery Date for WooCommerce versions = 4.3.1...