9691 matches found
EUVD-2025-205171
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcomsmsmprobe There are two refcount leak bugs in qcomsmsmprobe: 1 The 'localnode' is escaped out from foreachchildofnode as the break of iteration, we should call ofnodeput for it in...
EUVD-2025-205168
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple check...
EUVD-2025-204838
CMSimpleXH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitra...
EUVD-2025-204810
Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this...
On the Effectiveness of Instruction-Tuning Local LLMs for Identifying Software Vulnerabilities
Large Language Models LLMs show significant promise in automating software vulnerability analysis, a critical task given the impact of security failure of modern software systems. However, current approaches in using LLMs to automate vulnerability analysis mostly rely on using online API-based LL...
EUVD-2025-204329
A reflected cross-site scripting vulnerability in Kentico Xperience allows authenticated users to inject malicious scripts in the administration interface. Attackers can exploit this vulnerability to execute arbitrary scripts within the administrative context...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the association setup handler process. An attacker can cause the service to crash and disrupt user-plane services by sending a PFCP Association Setup Request that omits the mandatory NodeID Information Eleme...
CVE-2025-65563
A denial-of-service vulnerability exists in the omec-project UPF (specifically the upf-epc/pfcpiface component) up to at least version upf-epc-pfcpiface:2.1.3-dev . The root cause is a NULL pointer dereference occurring in the association setup handler when the software receives a PFCP Associatio...
EUVD-2025-203964
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, watchOS 26.2. An app may be able to access a user’s Safari history...
ECHO-6CC4-CC58-D5C2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
[SECURITY] [DLA 4413-1] node-url-parse security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-4413-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 16, 2025 https://wiki.debian.org/LTS -...
EUVD-2025-203824
Server-Side Request Forgery SSRF vulnerability in Ctera Portal 8.1.x 8.1.1417.24 allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an iframe...
EUVD-2025-203409
Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malicious code...
EUVD-2025-203414
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service...
EUVD-2025-203372
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Attachment upload API treats the Authorization bearer value as a userId and enters a non-terminating body-handling branch for any non-empty bearer token, enabling trivial application-layer Do...
Cisco Integrated AI Security and Safety Framework Report
Artificial intelligence AI systems are being readily and rapidly adopted, increasingly permeating critical domains: from consumer platforms and enterprise software to networked systems with embedded agents. While this has unlocked potential for human productivity gains, the attack surface has...
EUVD-2025-203192
Not used...
CVE-2025-14535
creationtimestamp| type| source ---|---|--- 2025-12-11 19:50:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702668769020088 2025-12-12 01:35:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/115704026118128056 2025-12-12 01:35:30+00:00| seen|...