CVE-2022-49898

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix tree mod log mishandling of reallocated nodes We have been seeing the following panic in production kernel BUG at fs/btrfs/tree-mod-log.c:677! invalid opcode: 0000 1 SMP RIP: 0010:treemodlogrewind+0x1b4/0x200 RSP:...

CVE-2025-37743

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination rings for extended statistics mode and standalone monitor mode. In extended statistics mode, TLVs are parsed from the buffer received from...

CVE-2022-49816

No description is available for this CVE...

CVE-2022-49777

In the Linux kernel, the following vulnerability has been resolved: Input: i8042 - fix leaking of platform device on module removal Avoid resetting the module-wide i8042platformdevice pointer in i8042probe or i8042remove, so that the device can be properly destroyed by i8042exit on module unload...

CVE-2021-27162

creationtimestamp| type| source ---|---|--- 2025-05-01 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i25jcy23...

Why is Ransomware Still a Thing in 2025?

When was the last time you had a serious conversation about cybersecurity that didn’t touch on ransomware? We all know that it’s one of the most persistent and damaging threats out there. Yet, this isn’t because it’s new—ransomware’s been around since 1989—but because we are making it far too eas...

CVE-2025-37786

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

CVE-2025-39538

creationtimestamp| type| source ---|---|--- 2025-05-01 13:00:06+00:00| published-proof-of-concept| Telegram/Z0ari8MHZAzBUd7K9yxhwtBySsURYEVG61pidF9swyP9zTE 2025-08-03 21:03:08+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbynxdy2b...

MicroDicom DICOM Viewer

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information, cause memory corruption, and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

CVE-2025-32881

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...

PT-2025-18668 · Gotenna · Gotenna

Name of the Vulnerable Software and Affected Versions: goTenna v1 devices with app 5.5.3 and firmware 0.25.5 Description: An issue was discovered where the GID, which is the user's phone number by default unless they opt out, is not encrypted in messages. This is sensitive information as it can b...

CVE-2025-30422

creationtimestamp| type| source ---|---|--- 2025-04-30 21:15:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14163 2025-04-30 21:55:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxipdsw2p 2025-05-01 00:36:50+00:00| seen| https://t.me/cvedetector/24152 2025-05-02...

AI Code Hallucinations Increase the Risk of ‘Package Confusion’ Attacks

A new study found that code generated by AI is more likely to contain made-up information that can be used to trick software into interacting with malicious code...

CVE-2025-30391

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 19:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642077120482 2025-04-30 20:30:46+00:00| seen|...

CVE-2025-32376

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14051 2025-04-30 16:07:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427772732716398 2025-04-30 17:55:10+00:00| seen|...

CVE-2025-4142

creationtimestamp| type| source ---|---|--- 2025-04-30 15:12:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114427554904223230 2025-04-30 23:14:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14191 2025-04-30 23:48:34+00:00| seen|...

CVE-2025-4114

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14008 2025-04-30 12:35:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114426941022216347 2025-04-30 13:48:40+00:00| seen|...

CVE-2025-4110

creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14007 2025-04-30 13:55:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnzx4j7hll24 2025-04-30 14:34:07+00:00| seen|...

PT-2025-18333 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. This could potentially expose confidential information. Recommendations: At the moment,...

CVE-2025-4093

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 128.10 and Thunderbird 128.10...