24535 matches found
CVE-2025-21472
creationtimestamp| type| source ---|---|--- 2025-08-06 07:52:18+00:00| seen| Telegram/4x4kty0jSofe3SdmYyWJv152GhQt6XITc92YTPPj6XhKmjc...
kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...
CVE-2025-21013
creationtimestamp| type| source ---|---|--- 2025-08-06 04:50:45+00:00| seen| Telegram/64eIC3Kqb99SOeX9tuYJUDR836ysC-ewuWHRF74mDGxleB4...
CVE-2025-54638
creationtimestamp| type| source ---|---|--- 2025-08-06 02:53:03+00:00| seen| Telegram/3L7uqxueTXHiJu69KDf4Y0QV1FIgMPDRp-jper6jg3Gu6MU...
CVE-2025-54624
Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54614
creationtimestamp| type| source ---|---|--- 2025-08-06 01:52:35+00:00| seen| Telegram/RJYqd4JqShnTSFFbxlwDGb52EAyosuv6f8DpZ03wzLZNcs...
CVE-2025-54619
creationtimestamp| type| source ---|---|--- 2025-08-06 01:52:27+00:00| seen| Telegram/qSHDoE0bke5QlZwTqyri1g9ZmxKG42v2jmJvrI8Vuwwcw-w...
CVE-2025-54621
creationtimestamp| type| source ---|---|--- 2025-08-06 01:52:23+00:00| seen| Telegram/BEabR8aB6fxDUbxAJGa2LmuTbDDqLiPGJyhd8fOupixuPWY...
Drone Detection with Event Cameras
The diffusion of drones presents significant security and safety challenges. Traditional surveillance systems, particularly conventional frame-based cameras, struggle to reliably detect these targets due to their small size, high agility, and the resulting motion blur and poor performance in...
Linux Distros Unpatched Vulnerability : CVE-2025-37747
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred signal hadn't managed to be sent before the file g...
virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
...
CVE-2025-8550
creationtimestamp| type| source ---|---|--- 2025-08-05 19:33:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46696 2025-08-06 03:00:06+00:00| published-proof-of-concept| Telegram/gsIxsEVZkehNrEHfOWeYcpkBB1bmett9R7uz7cEInOPnwUM 2025-08-08 21:02:20+00:00| seen|...
CVE-2025-50675
creationtimestamp| type| source ---|---|--- 2025-08-05 13:47:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46666 2025-08-05 15:41:14+00:00| seen| https://t.me/GithubRedTeam/46676 2025-08-05 21:00:04+00:00| published-proof-of-concept|...
Linux Distros Unpatched Vulnerability : CVE-2018-12392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor eve...
kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...
xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...
Zero Day Quest: Join the largest hacking event with up to $5 million in total bounty awards
Last year, we announced the largest hacking event in history: Zero Day Quest, with up to $4 million in bounty awards. The response from the global security community was incredible and helped improve security for our customers and partners. This year, Zero Day Quest is back with even more potenti...
Whispering Agents: an Event-Driven Covert Communication Protocol for the Internet of Agents
The emergence of the Internet of Agents IoA introduces critical challenges for communication privacy in sensitive, high-stakes domains. While standard Agent-to-Agent A2A protocols secure message content, they are not designed to protect the act of communication itself, leaving agents vulnerable t...
U.S. Dept Of Defense: Cross-Site Scripting via 'EVENT_DESCRIPTION' parameter
A Cross-Site Scripting XSS vulnerability was discovered in the POST method on the website, specifically through the EVENTDESCRIPTION parameter. Exploitation of this vulnerability could have led to severe consequences, including session hijacking. The vulnerability was caused by insufficient...