OSV-2025-845 Global-buffer-overflow in icaltime_day_of_year

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452914686 Crash type: Global-buffer-overflow READ 4 Crash state: icaltimedayofyear expandyeardays iteratorsetstart...

GHSA-6G2V-66CH-6XMH LibreNMS alert-rules has a Cross-Site Scripting Vulnerability

Executive Summary Product: LibreNMS Vendor: LibreNMS Vulnerability Type: Cross-Site Scripting XSS CVSS Score: 4.3 AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L Affected Version: 25.8.0 latest at time of discovery POC File: Download POC Ticket: ZDI-CAN-28105: LibreNMS Alert Rules Cross-Site Scripting...

CVE-2025-11464

creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-955/ 2025-10-29 23:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4en6ec2bh2s...

CVE-2025-11465

creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-956/ 2025-10-29 23:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4emb2c7er2k...

CVE-2025-11463

creationtimestamp| type| source ---|---|--- 2025-10-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-954/ 2025-10-29 23:30:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4em3o6xwa2j...

CVE-2025-48982

creationtimestamp| type| source ---|---|--- 2025-10-15 14:05:45+00:00| seen| https://vulnerability.circl.lu/bundle/cafe2e2f-6c80-497d-93e2-f209820608e6 2025-10-27 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-963/ 2025-10-31 14:01:49+00:00| seen|...

Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped

Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come under active exploitation in the wild, as the tech giant officially ended support for its Windows 10 operating system unless the PCs are enrolled in the...

Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped

Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come under active exploitation in the wild, as the tech giant officially ended support for its Windows 10 operating system unless the PCs are enrolled in the...

Patch Tuesday, October 2025 ‘End of 10’ Edition

Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October's Patch Tuesday also marks the final month that Microsoft will ship security updates for...

Patch Tuesday - October 2025

Microsoft is publishing 172 new vulnerabilities today. Microsoft is aware of public disclosure for just two of the vulnerabilities published today, and claims no evidence of in-the-wild exploitation. Today sees six zero-day vulnerabilities patched, but only a single one is evaluated as critical...

Microsoft and Adobe Patch Tuesday, October 2025 Security Update Review

As cybersecurity threats evolve, Microsoft's October 2025 Patch Tuesday delivers one of the most comprehensive security updates of the year. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for October 2025 This month's release addresses a staggering 193 vulnerabilities,...

CVE-2025-553315

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-59497

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-59213

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-53782

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-59227

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0315 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 20:57:38+00:00| seen|...

CVE-2025-59237

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0315 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-55248

creationtimestamp| type| source ---|---|--- 2025-10-14 16:21:47+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0313 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-16 12:00:53+00:00| seen|...

Microsoft Limits IE Mode in Edge After Chakra Zero-Day Activity Detected

Microsoft restricted access to Edge's IE Mode in August 2025 after hackers used a Chakra zero-day flaw to bypass security and take over user devices. Check out the new steps for enabling IE Mode...

CVE-2025-61882: Imperva Customers Protected Against Critical Oracle EBS Zero-Day RCE

TL;DR: In early October 2025, Oracle released an emergency security alert addressing CVE-2025-61882, a high-severity unauthenticated remote code execution RCE vulnerability in the Concurrent Processing / BI Publisher Integration component of Oracle E-Business Suite EBS versions 12.2.3 through...