CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...

CVE-2025-14308

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This...

CVE-2022-50663

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix possible memory leak in stmmacdvrprobe The bitmapfree should be called to free priv-afxdpzcqps when createsinglethreadworkqueue fails, otherwise there will be a memory leak, so we add the err path errorwqinit to...

CVE-2025-14307

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files...

CVE-2025-40335

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and rejecting for the invalid userq request at the IOCTLs first place...

CVE-2025-62109

creationtimestamp| type| source ---|---|--- 2025-12-09 15:55:50+00:00| seen| https://gist.github.com/Darkcrai86/d0c2a978a715a21aead1697ced2c3ebc...

CVE-2025-62152

creationtimestamp| type| source ---|---|--- 2025-12-09 15:54:54+00:00| seen| https://gist.github.com/Darkcrai86/4b3d34e93a2aa943e1c361652e7ddf6c...

CVE-2025-63030

creationtimestamp| type| source ---|---|--- 2025-12-09 15:38:50+00:00| seen| https://gist.github.com/Darkcrai86/633d535db2089fd62f4507da22ead170...

CVE-2025-63052

creationtimestamp| type| source ---|---|--- 2025-12-09 15:32:42+00:00| seen| https://gist.github.com/Darkcrai86/953638d2cce81f780a9028701d2e6159...

CVE-2025-63057

creationtimestamp| type| source ---|---|--- 2025-12-09 15:30:45+00:00| seen| https://gist.github.com/Darkcrai86/40c0acfc71c02033e456e394657dc00d...

CVE-2025-67460

creationtimestamp| type| source ---|---|--- 2025-12-09 15:28:40+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m7kucj6k5g2m...

CVE-2025-63072

creationtimestamp| type| source ---|---|--- 2025-12-09 15:23:16+00:00| seen| https://gist.github.com/Darkcrai86/67421ce1e988aacaf168ea7d8decdb2e...

CVE-2025-67596

creationtimestamp| type| source ---|---|--- 2025-12-09 14:58:06+00:00| seen| https://bsky.app/profile/potato.software/post/3m7kslrcyvz2j...

CVE-2025-63024

CVE-2025-63024 affects WordPress plugin Order Delivery Date for WooCommerce (tychesoftwares) up to version 4.3.1. The issue is Missing Authorization / Broken Access Control due to incorrectly configured access levels, enabling unauthorized actions. Wordfence and Patch Stack indicate the vulnerabi...

CVE-2025-63024 WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through = 4.3.1...

CVE-2025-63024 WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through = 4.3.1...

RUSTSEC-2025-0152 `finch_cli_rust` was removed from crates.io for malicious code

This attempts to typosquat the existing crate finchcli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reportin...

CVE-2025-64696

creationtimestamp| type| source ---|---|--- 2025-12-09 11:33:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kh6ssvi526...

CVE-2025-14311

creationtimestamp| type| source ---|---|--- 2025-12-09 11:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kg5xzmh22k...

CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...