CVE-2025-50122

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artifacts...

PT-2025-29275

Name of the Vulnerable Software and Affected Versions: saltbo zpan versions up to 1.6.5 saltbo zpan version 1.7.0-beta2 Description: A vulnerability exists in saltbo zpan related to the JSON Web Token Handler component. The issue affects the NewToken function within the...

How AI Bots Are Rewriting the Rules of Publishing

See how AI bots impact publishers and how Akamai helps you protect, control, and monetize your content as AI reshapes how people find information...

WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability

Path Traversal Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pro Bulk Watermark Plugin for WordPress versions = 2.0...

CVE-2025-38334

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not gracefully handle machine checks. Despite this, the existing SGX code...

CVE-2025-38273 net: tipc: fix refcount warning in tipc_aead_encrypt

In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipcaeadencrypt syzbot reported a refcount warning 1 caused by calling getnet on a network namespace that is being destroyed refcount=0. This happens when a TIPC discovery timer fires during...

CVE-2025-7220

creationtimestamp| type| source ---|---|--- 2025-07-09 06:53:19+00:00| seen| https://bsky.app/profile/potato.software/post/3ltja64zxce2j 2025-07-09 09:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjjr4w3nx2s...

PT-2025-29370 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability exists in the Tenda FH1202. The fromNatlimit function within the /goform/Natlimit file is susceptible to a stack-based buffer overflow. This occurs through the manipulatio...

AI Agent Smart Contract Exploit Generation

We present A1, an agentic execution driven system that transforms any LLM into an end-to-end exploit generator. A1 has no hand-crafted heuristics and provides the agent with six domain-specific tools that enable autonomous vulnerability discovery. The agent can flexibly leverage these tools to...

CVE-2025-47976 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

Monero: Reported RPC Overflow

A stack buffer overflow was reported in the Monero RPC server. Specifically, on line 1291 of the corerpcserver.cpp file, an overflow could occur if the size of the b.data did not match the size of the crypto::keyimage. Additionally, a missing return statement was found following line 1289. The...

WordPress Auto Login After Registration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Auto Login After Registration versions = 1.0.0...

WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Billey versions 2.1.6...

Microsoft Windows SSDP 安全漏洞

Microsoft Windows SSDP is a simple service discovery provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows SSDP. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version...

Microsoft Windows SSDP 资源管理错误漏洞

Microsoft Windows SSDP is a simple service discovery provider program from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows SSDP. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

The Impact of Event Data Partitioning on Privacy-Aware Process Discovery

Information systems support the execution of business processes. The event logs of these executions generally contain sensitive information about customers, patients, and employees. The corresponding privacy challenges can be addressed by anonymizing the event logs while still retaining utility f...

Hunting in the Dark: Metrics for Early Stage Traffic Discovery

Threat hunting is an operational security process where an expert analyzes traffic, applying knowledge and lightweight tools on unlabeled data in order to identify and classify previously unknown phenomena. In this paper, we examine threat hunting metrics and practice by studying the detection of...

CVE-2025-45809

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints...

CVE-2025-23968

creationtimestamp| type| source ---|---|--- 2025-07-03 21:40:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3ox54mus2l 2025-07-04 03:00:05+00:00| published-proof-of-concept| Telegram/RzZ013A6hXC-6kV-YI4QCReoYBbyiIzsP4toqc70fDWU4nE 2025-08-06 13:54:20+00:00| seen|...

CVE-2025-38121 wifi: iwlwifi: mld: avoid panic on init failure

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: avoid panic on init failure In case of an error during init, inhwrestart will be set, but it will never get cleared. Instead, we will retry to init again, and then we will act like we are in a restart when we...