CVE-2025-23349

creationtimestamp| type| source ---|---|--- 2025-09-24 13:51:33+00:00| seen| Telegram/XNeaT1xFFmuVrBvI14nhp697xLiEWJgThl2uyN4RjWRli8...

CVE-2025-39890

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...

CVE-2025-39890 wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...

CVE-2025-39890

CVE-2025-39890 fixes a memory leak in the Linux kernel’s ath12k driver. In ath12k_service_ready_ext_event(), the code path that handles a failure does not free svc_rdy_ext.mac_phy_caps, leading to a leaked 1024-byte object reported by kmemleak. The patch ensures that mac_phy_caps is freed in erro...

GHSA-XXXX-XXXX-XXXX

creationtimestamp| type| source ---|---|--- 2025-09-24 10:59:00+00:00| seen| https://gist.github.com/wdcs-kishansudani/bd0202112117cb8a2269fa1190eb5b79 2025-10-16 15:12:46+00:00| seen| https://gist.github.com/knqyf263/c383be7ce9749cd462eefba79dd1a319 2025-12-01 17:48:05+00:00| seen|...

CVE-2025-9965

creationtimestamp| type| source ---|---|--- 2025-09-24 06:02:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzkr7bujzb2d 2026-03-31 15:17:49+00:00| seen| Telegram/S9jL3hwr17xpRfRa4PHp4JxkYDz0Y3zqhQwH-KxEaxZk4...

CVE-2025-55553

creationtimestamp| type| source ---|---|--- 2025-09-24 02:11:42+00:00| seen| https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc...

CVE-2025-55560

creationtimestamp| type| source ---|---|--- 2025-09-24 02:11:42+00:00| seen| https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc...

Regularjs 安全漏洞

Regularjs is a js library for creating data-driven components from the regularjs open source. A security vulnerability exists in Regularjs version 0.2.0 and earlier, which stems from a prototype contamination in the mp.addEventHandler function that could lead to a denial of service attack...

PT-2025-39339

CVE-2025-00123 UNDER DEVELOPMENT - USE AT YOUR OWN RISK!!! Enhanced Incident Summary Report Executive Summary On September 18, 2025, a medium-severity incident Risk Score https://t.co/mYu56R5gA4...

GHSA-WCWH-7GFW-5WRR

creationtimestamp| type| source ---|---|--- 2025-09-23 19:04:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115255164461051194...

CVE-2025-0672

creationtimestamp| type| source ---|---|--- 2025-09-23 17:52:57+00:00| seen| Telegram/tWCfJsJXozDipwnBfLvxjYY8gNa9gDtb75Z2Y7Zm7kZFI...

CVE-2024-38687

creationtimestamp| type| source ---|---|--- 2025-09-23 17:03:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lzjfom2m6s2y...

CVE-2025-5717

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-5717

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-5717 Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-5717

CVE-2025-5717 describes an authenticated remote code execution in multiple WSO2 products caused by improper input validation in the Event Processor Admin Service. An attacker with administrative access to SOAP admin services can deploy a Siddhi execution plan containing malicious Java code, enabl...

CVE-2025-5717 Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-9588

creationtimestamp| type| source ---|---|--- 2025-09-23 12:54:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115253710943079734 2025-09-24 09:02:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzl3bpoa232w...

CVE-2025-39869

creationtimestamp| type| source ---|---|--- 2025-09-23 07:40:04+00:00| seen| https://gist.github.com/Darkcrai86/6944c9336af9e00a69604509d0496e86 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...