Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server’s event loop for an extended period, due to the use of the HTTPHeaders.add method. This method accumulates values using string...

CVE-2026-0504

creationtimestamp| type| source ---|---|--- 2026-01-13 05:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbtnv2vjq2x 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:59:47+00:00| seen|...

CVE-2025-66177

creationtimestamp| type| source ---|---|--- 2026-01-13 03:55:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbnugd2vj2b 2026-01-13 04:00:34+00:00| seen| Telegram/UkQy5p66ZqtUntQbyuL7Mmw6MfrjmrDI9c523Bq1eF22IU 2026-01-13 06:02:27+00:00| seen|...

CVE-2026-23949

creationtimestamp| type| source ---|---|--- 2026-01-13 02:50:10+00:00| published-proof-of-concept| https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 2026-01-20 01:50:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mct265xpal2i 2026-01-20...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of event flags in the XDPTX path in the bnxten driver, which could result in the TX doorbe...

Linux Distros Unpatched Vulnerability : CVE-2025-68770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix XDPTX path For XDPTX action in bnxtrxxdp, clearing of the event flags is not...

Linux Distros Unpatched Vulnerability : CVE-2025-68798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc-eventsidx can become NULL in a subtle race condition with NMI-throttle-x86pmustop. Che...

CVE-2025-58770

creationtimestamp| type| source ---|---|--- 2026-01-12 16:02:59+00:00| seen| Telegram/XntR8Q08ItQqPRQ7FMyZvktk-SlD6Wr0fFrSW9Df9BO1jiA...

CVE-2025-14672

creationtimestamp| type| source ---|---|--- 2026-01-12 15:02:17+00:00| seen| Telegram/y0eQAbUKuWo3WgNQ26iaWbPj3ea5ybOv03pwHsLfPooVzvs...

kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue

A flaw was discovered in the Bluetooth subsystem of the Linux kernel. When processing a HCIEVNUMCOMPPKTS event, the function hciconntxdequeue did not properly hold or release the hdev device lock, which may lead to a use-after-free of the connection structure...

EUVD-2026-1939

Stored Cross-Site Scripting XSS vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘replydescription’ parameter...

CVE-2025-20773

creationtimestamp| type| source ---|---|--- 2026-01-12 10:01:47+00:00| seen| Telegram/B4Ns6MZa2yeXCPgPlhBOXwBNRpMHFi0mVOBvEF18yEU0jtA...

CVE-2025-69267

creationtimestamp| type| source ---|---|--- 2026-01-12 06:01:26+00:00| seen| Telegram/pWbuGN1KVOAQ47r4fm52NlPcXYWbBQdOrOq5aZ05KasKkpQ 2026-01-12 06:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc7emjnlro2c 2026-01-12 08:10:36+00:00| seen|...

kernel: audit: fix out-of-bounds read in audit_compare_dname_path()

An out of bounds read exists in the linux kernel such that when a watch on dir=/ is combined with an fsnotify event for a single-character name directly under root an out-of-bounds read can occur in auditcomparednamepath...

Malicious Package

Overview @gwp-gtmt-components/event-listener is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

EUVD-2026-1988

Malicious code in @gwp-gtmt-components/event-listener npm...

Malicious code in @gwp-gtmt-components/event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c91e4f79d71c29b131ccb10fac2c3917af3d3a443cf252feeb683ef68d797 The package @gwp-gtmt-components/event-listener was found to contain malicious code. Source: ghsa-malware...

MAL-2026-208 Malicious code in @gwp-gtmt-components/event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c91e4f79d71c29b131ccb10fac2c3917af3d3a443cf252feeb683ef68d797 The package @gwp-gtmt-components/event-listener was found to contain malicious code. Source: ghsa-malware...

CentOS 9 : kernel-5.14.0-658.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the kernel-5.14.0-658.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns...

Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an IoT development framework from China Loxin Espressif. A security vulnerability exists in Espressif ESP-IDF versions prior to 1.1.0, which stems from a USB event callback and user code sharing state without locking, which could lead to a double release...