PT-2026-20345

Name of the Vulnerable Software and Affected Versions fast-xml-parser versions prior to 5.3.6 Description The XML parser is susceptible to an unlimited amount of entity expansion. A small XML input can cause the parser to spend significant time processing a single request, leading to application...

PT-2026-7042

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.22.0 Description FreeRDP, a Remote Desktop Protocol implementation, contains a flaw related to the ainput send input event function. This function caches a channel callback in a local variable and subsequently uses ...

PT-2026-6158

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.3+deb14-amd64 1 Description A flaw exists in the Linux kernel related to the handling of synthetic stacktraces within the tracing subsystem. Specifically, when creating a synthetic event based on an existing...

PT-2026-6173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ipvlan implementation related to address locking. The initial code assumed address changes occurred under RTNL, but this is not the case for IPv6...

PT-2026-27747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where raw event callbacks could occur even for a HID device that had not been claimed, potentially causing a crash if a broken device were connected. The...

CVE-2024-58315

creationtimestamp| type| source ---|---|--- 2025-12-31 21:03:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrahuw4s22...

CVE-2022-50691

creationtimestamp| type| source ---|---|--- 2025-12-31 21:02:54+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbcrafzyq522 2026-01-12 21:00:04+00:00| published-proof-of-concept| Telegram/0ln6CDnwyDBqOXy8lI1iw8ZmyXvW2AoBrPGhoxY4lBuN7No 2026-01-13 03:00:07+00:00|...

CVE-2025-23705

creationtimestamp| type| source ---|---|--- 2025-12-31 20:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcqj5qsg72g 2026-01-02 08:05:41+00:00| seen| https://gist.github.com/Darkcrai86/e4f8401f364f86038d0cb8ef31387942...

CVE-2025-62131

creationtimestamp| type| source ---|---|--- 2025-12-31 16:47:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbccxsw4vo2c...

Security Bulletin: IBM Event Streams is vulnerable to Uncontrolled Recursion vulnerability (CVE-2025-48924)

Summary IBM Event Streams is vulnerable to Uncontrolled Recursion vulnerability due to the use of the Apache Commons Lang artifact. This artifact primarily used for utility functions such as string manipulation, object comparison, and handling common operations that simplify Java development...

Security Bulletin: IBM Event Streams is vulnerable to Weak Encryption (CVE-2025-45767)

Summary IBM Event Streams is vulnerable to weak encryption due to the JOSE library. JOSE is used for JSON Object Signing and Encryption in token-based authentication. Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is...

CVE-2025-62136

creationtimestamp| type| source ---|---|--- 2025-12-31 13:06:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbbwncs3qd2y...

CVE-2025-69012

Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Organiser: from n/a through = 3.12.8...

CVE-2025-1977

creationtimestamp| type| source ---|---|--- 2025-12-31 08:12:09+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mbbg66qekb2z 2025-12-31 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbbzdirsoh26 2025-12-31 17:20:12+00:00| seen|...

CVE-2025-13029

creationtimestamp| type| source ---|---|--- 2025-12-31 06:37:22+00:00| seen| https://bsky.app/profile/potato.software/post/3mbbaupnewh24 2026-01-02 15:22:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbh75gxx7u2p 2026-01-02 18:50:33+00:00| seen|...

SUSE CVE-2023-54173

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfeventoutput We received report 1 of kernel crash, which is caused by using nesting protection without disabled preemption. The bpfeventoutput can be called by programs executed by bpfprogrunarraycg...

SUSE CVE-2023-54211

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix warning in tracebufferedeventdisable Warning happened in tracebufferedeventdisable at WARNONONCE!tracebufferedeventref Call Trace: ? warn+0xa5/0x1b0 ? tracebufferedeventdisable+0x189/0x1b0...

SUSE CVE-2023-54303

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfperfeventoutput The nesting protection in bpfperfeventoutput relies on disabled preemption, which is guaranteed for kprobes and tracepoints. However bpfperfeventoutput can be also called from uprobes...

WordPress Essential Addons for Elementor plugin <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget vulnerability

AuthenticatedContributor+ Stored Cross-Site Scripting via Event Calendar Widget vulnerability discovered by zer0gh0st in WordPress Plugin Essential Addons for Elementor versions = 6.1.12...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992957 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an...