CVE-2025-38028

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: Fix a race in nfslocalopenfh Once the clp-cluuid.lock has been dropped, another CPU could come in and free the struct nfsdfile that was just added. To prevent that from happening, take the RCU read lock before droppi...

CVE-2025-38021

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check of pipectx-planestate for updatedchubpdpp Similar to commit 6a057072ddd1 "drm/amd/display: Fix null check for pipectx-planestate in dcn20programpipe" that addresses a null pointer dereference on...

CVE-2025-38007

CVE-2025-38007 affects HID uclogic in the Linux kernel. Root cause: uclogic_input_configured() dereferences a NULL after devm_kasprintf() returns NULL due to allocation failure. Mitigation: a NULL check is added after devm_kasprintf() to prevent the dereference. Described fixes are documented in ...

CVE-2025-4413

creationtimestamp| type| source ---|---|--- 2025-06-18 02:38:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18683 2025-06-18 03:31:15+00:00| seen| Telegram/RFHOwTBsrKo8b7AnKoOabKPwyky4B78P10kog1pHIAEQm7Q 2025-06-18 05:03:00+00:00| seen|...

Multi-Use LLM Watermarking and the False Detection Problem

Digital watermarking is a promising solution for mitigating some of the risks arising from the misuse of automatically generated text. These approaches either embed non-specific watermarks to allow for the detection of any text generated by a particular sampler, or embed specific keys that allow...

CVE-2025-45661

A cross-site scripting XSS vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload into the id parameter at /members/edit.php...

CVE-2025-44951

A missing length check in ogspfcpdevadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dev field with a value with length greater than 32...

CVE-2025-44952

A missing length check in ogspfcpsubnetadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101...

CVE-2024-54458

creationtimestamp| type| source ---|---|--- 2025-06-17 21:38:25+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrtheiu25s2v 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-07-28 16:16:02+00:00| seen|...

CVE-2025-49843

The CVE-2025-49843 issue affects conda-smithy prior to version 3.47.1, where the travis_headers function creates files with permissions exceeding 0o600, potentially allowing read/write access beyond the intended user. This weakens least-privilege protections and could let an attacker access confi...

CVE-2025-49214

CVE-2025-49214 concerns Trend Micro Endpoint Encryption PolicyServer with an insecure deserialization flaw that could enable post-auth remote code execution. Affected component/behavior: deserialization function in PolicyServer; root cause described as insecure deserialization. Impact: high acros...

CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper trycopy in llama.cpp/src/vocab.cpp: llamavocab::impl::tokentopiece casts a ve...

CVE-2025-34510

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18657 2025-06-17 19:52:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114700449431770143 2025-06-17 21:41:41+00:00| seen|...

CVE-2025-49863

creationtimestamp| type| source ---|---|--- 2025-06-17 18:08:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt3ngymvn2r 2025-06-18 17:39:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18797...

CVE-2025-49868

creationtimestamp| type| source ---|---|--- 2025-06-17 17:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt2ovby2r2k 2025-06-20 13:43:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18948...

CVE-2025-49259

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-47452

Unrestricted Upload of File with Dangerous Type vulnerability in RexTheme WP VR wpvr allows Upload a Web Shell to a Web Server.This issue affects WP VR: from n/a through = 8.5.26...

CVE-2025-6199

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the...

CVE-2025-3880

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18578 2025-06-17 15:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrst574fmt2k...

CVE-2025-6162

creationtimestamp| type| source ---|---|--- 2025-06-17 05:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18566 2025-06-17 06:02:00+00:00| published-proof-of-concept| Telegram/iU4ppXSD7ZvfAAYF9ke0MI2-YhaidmuvbOqcw99nNEFXY 2025-06-17 07:22:58+00:00| seen|...