CVE-2025-26931

creationtimestamp| type| source ---|---|--- 2025-02-25 15:23:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5291 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

Gvariant offset table entry size is not checked in is_normal()

...

openSUSE Security Advisory (SUSE-SU-2024:1147-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2024:0278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26532

CVE-2025-26532 relates to Moodle: “Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.” Multiple sources (GHSA, OSV, CIRCL, Nessus) describe a vulnerability where teachers can evade or bypass trusttext configuration when restoring glos...

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24032: default value for certpolicy none allows for authentication bypass bsc1237062. CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash bsc1237058. Patch...

FlatPress 安全漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A security vulnerability exists in FlatPress version 1.3.1, which stems from an improperly cleaned and escaped TextArea field input in the Add Entry feature. An authenticated attacker can inject malicious...

PT-2025-7772 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.3.1 Description: A stored Cross-Site Scripting issue was identified within the "Add Entry" feature, allowing authenticated attackers to inject malicious JavaScript payloads into blog posts. This is executed when other user...

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...

Denial Of Service (DoS)

Keylime is vulnerable to Denial-of-Service DoS. The vulnerability is due to improper handling of database entries due to stricter type checking, which prevents previously stored data from being processed, leading to application failure when querying attacker-populated entries...

CVE-2025-1367

creationtimestamp| type| source ---|---|--- 2025-02-17 00:49:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114016476693480471 2025-02-17 01:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidl3fvqnh2g 2025-02-17 03:38:40+00:00| seen|...

Fedora 40 : krb5 (2025-61b9344baf)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-61b9344baf advisory. - Prevent overflow when calculating ulog block size CVE-2025-24528 - Support PKCS11 EC client certs in PKINIT - kdb5util: fix DB entry flags on modification ...

PT-2025-25834

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the bpf verifier, where the copy verifier state function should copy the loop entry field. If not copied,...

CVE-2025-23657

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byul3tk2a 2025-02-14 14:08:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002632799897470...

CVE-2024-20759

creationtimestamp| type| source ---|---|--- 2025-02-14 10:03:09+00:00| seen| Telegram/KEvKptrof4FefNAyoOjVwJCkgFAr-hiGaZRvbhhOHNcKunf...

CVE-2024-36801

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php...

CVE-2023-20582

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry PTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity...

CVE-2025-24889

The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to versions 0.14.1 and 1.0.1, an attacker who has already gained code execution in a virtual machine on the SecureDrop Workstation could gain...

CVE-2025-1283

creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-18 2025-02-13 21:21:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113998670914984780 2025-02-13 22:15:47+00:00| seen|...

SUSE CVE-2025-21696

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...