CVE-2025-9136

creationtimestamp| type| source ---|---|--- 2025-08-19 14:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwr4q6r3rl2e...

WordPress Dwell theme <= 1.7.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Dwell versions = 1.7.0...

WordPress OnLeash theme <= 1.5.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme OnLeash versions = 1.5.2...

CVE-2025-54421

creationtimestamp| type| source ---|---|--- 2025-08-18 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwoz3pl5mb2g...

CVE-2025-9026

A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-38550

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc-idev in mlddeldelrec pmc-idev is still used in ip6mcclearsrc, so as mldcleardelrec does, the reference should be put after ip6mcclearsrc return...

CVE-2025-38525

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix irq-disabled in localbhenable The rxrpcassessMTUsize function calls down into the IP layer to find out the MTU size for a route. When accepting an incoming call, this is called from rxrpcnewincomingcall which holds...

CVE-2025-38525

CVE-2025-38525 concerns the Linux kernel RXRPC code path where rxrpc_assess_MTU_size() is invoked with IRQs disabled, triggering a warning in the IP layer via local_bh_enable() and potential interrupt handling issues. The issue is resolved by moving the MTU-size assessment out of rxrpc_init_peer(...

CVE-2025-9026

A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9026

A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9026 D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection

A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9026

CVE-2025-9026 affects D-Link DIR-860L (firmware 2.04.B04). The vulnerability is in the Simple Service Discovery Protocol component, specifically the ssdpcgi_main function in htdocs/cgibin, enabling remote OS command injection. Publicly disclosed exploit indicates active risk, with impact on confi...

PT-2025-33471 · D Link · D-Link Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version 2.04.B04 Description: A vulnerability exists in the Simple Service Discovery Protocol component of the D-Link DIR-860L router. The issue is due to a command injection flaw within the ssdpcgi main function located in th...

Linux Distros Unpatched Vulnerability : CVE-2022-50043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: fix potential refcount leak in ndiscrouterdiscovery The issue happens on specific paths...

CVE-2025-55710

creationtimestamp| type| source ---|---|--- 2025-08-14 23:22:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwfi7f4h652t...

Malicious code in homey-device-discovery (npm)

The package homey-device-discovery was found to contain malicious code...

MAL-2025-22518 Malicious code in homey-device-discovery (npm)

The package homey-device-discovery was found to contain malicious code...

MAL-2025-10169 Malicious code in @zalastax/nolb-_kup (npm)

The package @zalastax/nolb-kup was found to contain malicious code...

MAL-2025-24793 Malicious code in kstars (npm)

The package kstars was found to contain malicious code...

Malicious code in discovery-player (npm)

The package discovery-player was found to contain malicious code...