CVE-2025-38335

In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPTRT When enabling PREEMPTRT, the gpiokeysirqtimer callback runs in hard irq context, but the inputevent takes a spinlock, which isn't allowed there as it is converted to a...

CVE-2025-38332

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset with...

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a critical security flaw impacting Citrix NetScaler ADC and Gateway to its Known Exploited Vulnerabilities KEV catalog, officially confirming the vulnerability has been weaponized in the wild. The shortcoming in...

GHSA-4Q84-546J-3MF5

creationtimestamp| type| source ---|---|--- 2025-07-10 21:38:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114831099385159796...

CVE-2025-53371

creationtimestamp| type| source ---|---|--- 2025-07-10 17:35:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830141628115070 2025-09-09 20:51:41+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-49630

creationtimestamp| type| source ---|---|--- 2025-07-10 15:49:18+00:00| seen| https://seclists.org/oss-sec/2025/q3/25 2025-07-10 17:02:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830011674092966 2025-07-10 18:24:45+00:00| seen|...

CVE-2024-43394

creationtimestamp| type| source ---|---|--- 2025-07-10 15:42:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/23 2025-07-10 17:02:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830011674092966 2025-07-10 18:06:01+00:00| seen|...

Deepfake criminals impersonate Marco Rubio to uncover government secrets

Deepfake attacks aren't just for recruitment and banking fraud; they've now reached the highest levels of government. News emerged this week of an AI-powered attack that impersonated US Secretary of State Marco Rubio. Authorities don't know who was behind the incident. A US State Department cable...

CVE-2025-6948

creationtimestamp| type| source ---|---|--- 2025-07-10 11:51:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114828788727504987 2025-07-16 17:11:07+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5gtfk2k 2025-07-16 17:11:10+00:00| seen|...

CVE-2024-7650

creationtimestamp| type| source ---|---|--- 2025-07-10 11:48:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114828777960128247...

CVE-2023-52236

A vulnerability has been identified in RUGGEDCOM i800 All versions, RUGGEDCOM i801 All versions, RUGGEDCOM i802 All versions, RUGGEDCOM i803 All versions, RUGGEDCOM M2100 All versions, RUGGEDCOM M2200 All versions, RUGGEDCOM M969 All versions, RUGGEDCOM RMC30 All versions, RUGGEDCOM RMC8388 V4.X...

CVE-2025-38343

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities suc...

CVE-2025-53475

creationtimestamp| type| source ---|---|--- 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08...

CVE-2025-40593

creationtimestamp| type| source ---|---|--- 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-04...

CVE-2025-53515

creationtimestamp| type| source ---|---|--- 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08...

Ubuntu: Security Advisory (USN-7628-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-28982 · Undefined · Undefined

CVE-2025-53753 Rejected reason https://t.co/3PDMxZW2Dr...

Mitsubishi Electric MELSEC iQ-F Series Improper Validation of Specified Index, Position, or Offset in Input (CVE-2025-3755)

This vulnerability allows a remote attacker to read information in the product, to cause a Denial-of-Service DoS condition in MELSOFT connection, or to stop the operation of the CPU module causing a DoS condtion on the CPU module, by sending specially crafted packets. The product is needed to res...

PT-2025-29090 · Undefined · Undefined

CVE-2025-53752 Rejected reason https://t.co/gWCiSuoxtb...

CVE-2025-38252

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix CPER handler device confusion By inspection, cxlcperhandleproterr is making a series of fragile assumptions that can lead to crashes: 1/ It assumes that endpoints identified in the record are a CXL-type-3 device,...