CVE-2025-22037

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in allocpreauthhash The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn-preauthinfo is not...

CVE-2025-22085

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-free with the following call trace: ================================================================== BUG: KASAN: slab-use-after-free in...

CVE-2025-22052

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in niusb If the usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the businterface is set to NULL on disconnect. This problem was introduced by...

CVE-2025-22097

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

CVE-2025-22084

In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1uartprobe function calls w1uartserdevopen which includes devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer...

CVE-2025-22077

In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Commit e9f2517a3e18 "smb: client: fix TCP timers deadlock after rmmod" is intended to fix a null-ptr-deref in...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2025-31147

Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users...

CVE-2025-29451

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12372 2025-04-17 22:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pajc52y 2025-04-18 00:41:40+00:00| seen|...

CVE-2025-29453

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12365 2025-04-17 22:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274q7dzc2l 2025-04-18 03:12:18+00:00| seen| https://t.me/cvedetector/23300...

CVE-2025-29449

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-25455

creationtimestamp| type| source ---|---|--- 2025-04-17 17:57:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12291 2025-04-17 18:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqxopnf2q 2025-04-17 23:01:10+00:00| seen|...

WordPress Avatar plugin <= 0.1.4 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by theviper17y in WordPress Plugin Avatar versions = 0.1.4...

CVE-2025-23132

In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquotwritebackdquots F2FS-fs dm-59: checkpoint=enable has some unwritten data. ------------ cut here ------------ WARNING: CPU: 6 PID: 8013 at fs/quota/dquot.c:691...

CVE-2025-43015

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:59+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325777103450 2025-04-17 17:57:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12305 2025-04-17 18:24:25+00:00| seen|...

CVE-2025-39596

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:59+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325715470592 2025-04-17 18:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3csmwi2g 2025-04-17 20:30:28+00:00| seen|...

CVE-2025-39526

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325296030508...

CVE-2025-22089

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hwcounters outside of init net namespace Commit 467f432a521a "RDMA/core: Split port and device counter sysfs attributes" accidentally almost exposed hw counters to non-init net namespaces. It didn't expose...

CVE-2025-23958

Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editor Wysiwyg Background Color: from n/a through = 1.0...

CVE-2025-24737 WordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Helper Premium: from n/a through = 4.6.1...