CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

OESA-2025-1516 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

Projectworlds Hospital Database Management System 注入漏洞

Projectworlds Hospital Database Management System is a hospital database management system from Projectworlds India. An injection vulnerability exists in Projectworlds Hospital Database Management System version 1.0, which stems from improper handling of the parameter MedID in the file...

Malware in payouts-banking-info

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-C8HM-H9GV-8JPJ

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

Alibaba Cloud Linux 3 : 0056: nodejs:14 (ALINUX3-SA-2021:0056)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0056 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22918: Node.js before 16.4.1,...

CVE-2025-30322

creationtimestamp| type| source ---|---|--- 2025-05-13 18:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501971768097313 2025-05-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eae6sgl2o 2025-05-13 21:24:39+00:00| seen| https://t.me/cvedetector/252...

kernel: drm/amdgpu: fix the waring dereferencing hive

A flaw was found in the drm/amdgpu component of the Linux kernel. This vulnerability occurs due to a missing null pointer check when dereferencing amdgpuhiveinfo hive. A local attacker could exploit this flaw to cause a system crash, leading to a denial of service DoS...

kernel: smb: client: Fix use-after-free of network namespace.

A flaw was found in the Linux kernel's Server Message Block SMB client. Improper reference counting allows kernel sockets to persist after their associated network namespace has been released. A local attacker with permission to create and destroy network namespaces—such as in containerized...

kernel: uprobes: fix kernel info leak via "[uprobes]" vma

A flaw was found in the Linux kernel's uprobes subsystem. When allocating memory for user space probes, the kernel maps an uninitialized memory page into a user space virtual memory area VMA. A local user can exploit this vulnerability to read uninitialized memory contents, resulting in an...

rsync: Info Leak via Uninitialized Stack Contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

CVE-2025-26662

creationtimestamp| type| source ---|---|--- 2025-05-13 05:30:30+00:00| seen| https://t.me/cvedetector/25154 2025-05-13 14:30:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16133...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails CVE-2022-49168 In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio CVE-2022-49413 In the Linux...

MAL-2025-191888 Malicious code in telegramdoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4cdffd265ab7e5d199258a068bf6c251370ae931fc905109bd2fb659cd7d9114 The package contains an embedded malicious executable probably blank grabber started when running the module. Probably continuation of 2025-05-pydoxing ---...

CVE-2025-46743

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15939 2025-05-12 18:26:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15958...

SUSE CVE-2025-37886

In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo Make the waitcontext a full part of the qinfo struct rather than a stack variable that goes away after pdscadminqpost is done so that the context is still available after the wait loop has...

DEBIAN-CVE-2025-37887

In the Linux kernel, the following vulnerability has been resolved: pdscore: handle unsupported PDSCORECMDFWCONTROL result If the FW doesn't support the PDSCORECMDFWCONTROL command the driver might at the least print garbage and at the worst crash when the user runs the "devlink dev info" devlink...

DEBIAN-CVE-2025-37886

In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo Make the waitcontext a full part of the qinfo struct rather than a stack variable that goes away after pdscadminqpost is done so that the context is still available after the wait loop has...

UBUNTU-CVE-2025-37886

In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo Make the waitcontext a full part of the qinfo struct rather than a stack variable that goes away after pdscadminqpost is done so that the context is still available after the wait loop has...

CVE-2025-37886

In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo Make the waitcontext a full part of the qinfo struct rather than a stack variable that goes away after pdscadminqpost is done so that the context is still available after the wait loop has...