CVE-2025-8392

The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2024-47120

creationtimestamp| type| source ---|---|--- 2025-09-13 04:38:17+00:00| seen| Telegram/ZA3Us7laJHw8JkYcP9Bi2svB3zSswPyuyfaYugVYArxuxI...

CVE-2025-10331

creationtimestamp| type| source ---|---|--- 2025-09-13 02:46:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyor5vmum42t...

CVE-2025-10325

creationtimestamp| type| source ---|---|--- 2025-09-12 23:37:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyogluqps52i...

CVE-2025-10328

creationtimestamp| type| source ---|---|--- 2025-09-12 23:32:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyogcwcomr2c...

CVE-2025-45585

creationtimestamp| type| source ---|---|--- 2025-09-12 22:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyodtzkk4o2f...

CVE-2025-39797

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

CVE-2025-39796

In the Linux kernel, the following vulnerability has been resolved: net: lapbether: ignore ops-locked netdevs Syzkaller managed to trigger lock dependency in xsknotify via registernetdevice. As discussed in 0, using registernetdevice in the notifiers is problematic so skip adding lapbeth for...

CVE-2025-39793

In the Linux kernel, the following vulnerability has been resolved: iouring/memmap: cast nrpages to sizet before shifting If the allocated size exceeds UINTMAX, then it's necessary to cast the mr-nrpages value to sizet to prevent it from overflowing. In practice this isn't much of a concern as th...

CVE-2025-10318

creationtimestamp| type| source ---|---|--- 2025-09-12 15:15:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lynkkpwv6h2c...

CVE-2025-8575

creationtimestamp| type| source ---|---|--- 2025-09-12 07:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymropei5x2m 2025-09-12 08:05:55+00:00| seen| https://gist.github.com/Darkcrai86/e5daee8e4cdb760338d43fdae91c6961...

CVE-2025-55996

creationtimestamp| type| source ---|---|--- 2025-09-12 04:26:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51229 2025-09-12 04:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51230 2025-09-12 09:00:05+00:00| published-proof-of-concept|...

CVE-2025-10298

creationtimestamp| type| source ---|---|--- 2025-09-12 00:46:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lylzxjflkn2c...

CVE-2025-59053

creationtimestamp| type| source ---|---|--- 2025-09-11 22:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyltcj6gxj2c 2025-09-12 01:31:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lym4j67b642d...

CVE-2025-23342

creationtimestamp| type| source ---|---|--- 2025-09-11 20:48:37+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lylmoooi2c2r...

CVE-2025-54111

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

CVE-2025-39769

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdevassertlocked in bnxtfreentpfltrs. The lock should be held during normal run-time but the assert will be triggered see below during bnxtremoveon...

CVE-2025-39754

In the Linux kernel, the following vulnerability has been resolved: mm/smaps: fix race between smapshugetlbrange and migration smapshugetlbrange handles the pte without holdling ptl, and may be concurrenct with migration, leaing to BUGON in pfnswapentrytopage. The race is as follows...

CVE-2025-39782

In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2logdocheckpoint Both jbd2logdocheckpoint and jbd2journalshrinkcheckpointlist periodically release jlistlock after processing a batch of buffers to avoid long hold times on the jlistlock. However,...

CVE-2025-39781

In the Linux kernel, the following vulnerability has been resolved: parisc: Drop WARNONONCE from flushcachevmap I have observed warning to occassionally trigger...