Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an IoT development framework from China Loxin Espressif. A security vulnerability exists in Espressif ESP-IDF versions prior to 1.1.0, which stems from a USB event callback and user code sharing state without locking, which could lead to a double release...

CVE-2026-0824

creationtimestamp| type| source ---|---|--- 2026-01-10 17:39:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc3kjymnpi2y...

CVE-2026-0822

creationtimestamp| type| source ---|---|--- 2026-01-10 15:00:50+00:00| published-proof-of-concept| Telegram/51hy6eeB0OX5Oi4WYV6NJVEVeitRj2FXamGCe71U1ruORGw 2026-01-10 17:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc3kswznff2e...

CVE-2025-53470 Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver

Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8. This issue requires a broken or bogus Bluetooth controller and thus severity is considered low. Users are...

CVE-2025-15502

creationtimestamp| type| source ---|---|--- 2026-01-10 09:00:25+00:00| published-proof-of-concept| Telegram/kNwatoZ7i9RhmIy1lcaojAEU2Vj4FvxeHvBbtht-pLYnTPo 2026-01-10 12:15:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc2ygd3jvb2e...

GHSA-3FM2-XFQ7-7778

creationtimestamp| type| source ---|---|--- 2026-01-10 08:01:06+00:00| published-proof-of-concept| Telegram/WQqRawnFxdQj2C7QSZvJhJYu2ip6AHddUppaVRsAsIpfVRo 2026-01-24 21:25:34+00:00| seen| https://gist.github.com/alon710/d73ab60e6a5b0c429d12ed3f16361991...

CVE-2025-68470

creationtimestamp| type| source ---|---|--- 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o...

GHSA-9JCX-V3WJ-WH4M

creationtimestamp| type| source ---|---|--- 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o...

CVE-2026-22029

creationtimestamp| type| source ---|---|--- 2026-01-10 03:25:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22sb3agx2u 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o 2026-01-10 04:19:31+00:00| seen|...

GHSA-5HVC-6WX8-MVV4

creationtimestamp| type| source ---|---|--- 2026-01-10 03:02:28+00:00| seen| Telegram/S2KXutw1drBgRsxEuEIjByNvXPd-WruEjV0wL9OdN7BsNk 2026-01-24 21:26:22+00:00| seen| https://gist.github.com/alon710/d56b28668cdd20484371c6f8fddc472f 2026-01-24 22:41:44+00:00| seen|...

Apache NimBLE 缓冲区错误漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. A buffer error vulnerability exists in Apache NimBLE 1.8 and earlier versions,...

CVE-2025-39757

creationtimestamp| type| source ---|---|--- 2026-01-09 19:04:21+00:00| seen| Telegram/uWo2DotdVh2fwtZZk9ml2peElMoxrJRVrbUKMpxrKERW9I 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2026-22698

creationtimestamp| type| source ---|---|--- 2026-01-09 18:07:00+00:00| published-proof-of-concept| https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-w3g8-fp6j-wvqw 2026-01-10 07:01:39+00:00| seen| Telegram/i2g9ck4oFpG2FQ6NO-wq7UgJ3FLiFKBZXo4--EYsPHmrFO0 2026-01-10...

CVE-2025-67133

creationtimestamp| type| source ---|---|--- 2026-01-09 17:26:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbyzd6carb2v...

CVE-2025-14598

creationtimestamp| type| source ---|---|--- 2026-01-09 15:05:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbyri2xav52x 2026-01-09 16:47:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbyx5eu72s2e 2026-01-09 16:47:32+00:00| seen|...

CVE-2005-1433

Multiple unknown vulnjerabilities HP OpenView Event Correlation Services OV ECS 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitrary code...

CVE-2023-49926

app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...

CVE-2023-49598

Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

CVE-2023-45913

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId. This vulnerability is triggered when the X11 server sends an DRI2BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is ...

CVE-2023-40765

User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...