CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

Large Language Models Cannot Reliably Detect Vulnerabilities in JavaScript: The First Systematic Benchmark and Evaluation

Researchers have proposed numerous methods to detect vulnerabilities in JavaScript, especially those assisted by Large Language Models LLMs. However, the actual capability of LLMs in JavaScript vulnerability detection remains questionable, necessitating systematic evaluation and comprehensive...

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

SUSE-SU-2025:21109-1 Security update for kernel-livepatch-MICRO-6-0_Update_6

This update for kernel-livepatch-MICRO-6-0Update6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882 - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm interface bsc1248672 - CVE-2025-38616: tls: handle data...

Tomiris wreaks Havoc: New tools and techniques of the APT group

While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2025-199847

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58307

Huawei HarmonyOS uses a screen recording framework module with a memory misreference (UAF) vulnerability that can be exploited locally to affect availability. Affected component: screen recording framework module in HarmonyOS. Root cause: memory misreference. Impact: availability. Exploitation de...

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2025-199850

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58303

CVE-2025-58303 concerns Huawei HarmonyOS: memory misreference/use-after-free in the screen recording framework module. Root cause: UAF/memory misreference leading to availability impact. Affected component: screen recording framework module (HarmonyOS). Impact per sources: availability disruption...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS screen recording framework module, which can be exploited by attackers to affect...

PT-2025-48294

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-48293

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A use-after-free issue exists in the screen recording framework module. Successful exploitation could impact system availability. Recommendations At the moment, there is no information about a newer...