CVE-2025-37829

In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpicpufreqgetrate cpufreqcpugetraw can return NULL when the target CPU is not present in the policy-cpus mask. scpicpufreqgetrate does not check for this case, which results in a NULL pointer...

CVE-2025-37806

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user executes ioctl2 to clear the compress flag of the file, which causes t...

CVE-2025-46727

A flaw was found in Rack::QueryParser. This vulnerability allows denial of service via oversized HTTP requests containing many parameters, resulting in memory exhaustion that consumes all available memory or CPU resource pinning, which keeps the CPU constantly busy...

CVE-2024-47619

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also possible to pass partial wildcards such as foo.ac.bar which glib matches but should be avoided / invalidated. This issue could have an...

Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2

Microsoft launched its Cybersecurity Governance Council in 2024, and with it, named a group of deputy chief information security officers that ensure comprehensive oversight of the company’s cybersecurity risk, defense, and compliance. These leaders work in tandem with product and engineering...

Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2

Microsoft launched its Cybersecurity Governance Council in 2024, and with it, named a group of deputy chief information security officers that ensure comprehensive oversight of the company’s cybersecurity risk, defense, and compliance. These leaders work in tandem with product and engineering...

CVE-2025-12351

creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/299 2025-10-27 15:46:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446907268586041...

CVE-2025-33093

creationtimestamp| type| source ---|---|--- 2025-05-07 11:22:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15290 2025-05-07 12:21:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114466521491649706 2025-05-07 12:26:34+00:00| seen|...

CVE-2025-1399

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15281 2025-05-07 08:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxykpep42w 2025-05-07 10:34:39+00:00| seen|...

CVE-2025-4335

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15244 2025-05-07 04:26:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl3lpu62h 2025-05-07 05:31:29+00:00| seen|...

Do Not Allow Login with an Empty Password

Login with an empty password means that a user can log in to a system without a password. If an empty password is allowed for login, the user with an empty password may be attacked or may be used by attackers. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted fro...

CVE-2025-0649

creationtimestamp| type| source ---|---|--- 2025-05-06 21:16:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462962265876830 2025-05-06 22:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojwintqaq24 2025-05-07 00:14:11+00:00| seen|...

CVE-2025-4041

creationtimestamp| type| source ---|---|--- 2025-05-06 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-01 2025-05-06 17:16:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462019079175066 2025-05-06 18:21:37+00:00| seen|...

CVE-2024-58237

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...

CVE-2024-58237

creationtimestamp| type| source ---|---|--- 2025-05-05 15:23:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114455911703454153 2025-05-05 16:16:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3logrdaeww422 2025-05-09 08:25:23+00:00| published-proof-of-concept|...

CVE-2025-20671

creationtimestamp| type| source ---|---|--- 2025-05-05 03:19:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14827 2025-05-05 06:16:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofpritbea2j 2025-05-05 07:18:20+00:00| seen|...

CVE-2025-20668

creationtimestamp| type| source ---|---|--- 2025-05-05 03:19:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14826 2025-05-05 06:16:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofpriwpje24 2025-05-05 07:03:34+00:00| seen|...

Command Execution Vulnerability in MaxKB at Hangzhou Feizhiyun Information Technology Co.

MaxKB is an open source knowledge base Q&A system based on big language model and RAG under Hangzhou Feizhiyun Information Technology Co. MaxKB has a command execution vulnerability that can be exploited by attackers to execute commands...

CVE-2021-1931

creationtimestamp| type| source ---|---|--- 2025-05-04 23:00:05+00:00| published-proof-of-concept| Telegram/kH2UXWtUrIpizMyzG2Re6WqFSBMK8XBuA3Zsl5G-RY2gsk 2025-05-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujowevjz2h 2026-04-04 18:31:04+00:00| seen|...

CVE-2023-53108

In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not used by the iucv module, but written by the z/VM hypervisor in case a CPU is deconfigured. Reported as: BUG dma-kmalloc-64 Not...