CVE-2023-53133

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcpbpfrecvmsgparser When the buffer length of the recvmsg system call is 0, we got the flollowing soft lockup problem: watchdog: BUG: soft lockup - CPU3 stuck for 27s!...

CVE-2023-53126

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sashba.phy memory leak in mpi3mrremove Free mrioc-sashba.phy at .remove...

CVE-2023-53100

In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4updateinlinedata Syzbot found the following issue: EXT4-fs loop0: mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. fscrypt: AES-256-CTS-CBC using implementation...

CVE-2023-53057

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix global-out-of-bounds To loop a variable-length array, hciinitstagesyncstage considers that stagei is valid as long as stagei-1.func is valid. Thus, the last element of stage.func should be intentionally invali...

CVE-2023-53113

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was already created by userspace but not activated yet, it has a chandef but the chandef isn't valid and has no channel. Check for this and ignore...

CVE-2023-53098

In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM clean up to remove cpu latency qos request, otherwise driver removal may have below kernel dump: 19.463299 Unable to handle kernel NULL...

CVE-2023-53118

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsiprochostdirrm decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsiaddhostwithdma change sinc...

CVE-2023-53095

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the process of being removed from an object. The locking rules here are a bit unclear but it looks currently like res-bo assignment is protected ...

CVE-2023-53102

In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw iceqpdis intends to stop a given queue pair that is a target of xsk pool attach/detach. One of the steps is to disable interrupts on these queues. It currently is broken in a way that...

CVE-2025-1884

creationtimestamp| type| source ---|---|--- 2025-05-02 15:16:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14493 2025-05-02 15:26:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114438937610533726 2025-05-02 16:15:18+00:00| seen|...

WordPress Nomupay Payment Processing Gateway plugin <= 7.1.7 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by astra.r3verii in WordPress Plugin Nomupay Payment Processing Gateway versions = 7.1.7...

CVE-2025-1301

creationtimestamp| type| source ---|---|--- 2025-05-02 11:15:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14468 2025-05-02 12:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn5sanf24 2025-05-02 14:30:45+00:00| seen|...

CVE-2025-0427

creationtimestamp| type| source ---|---|--- 2025-05-02 10:16:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14466 2025-05-02 12:00:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn64jr72l 2025-05-02 13:26:06+00:00| seen| https://t.me/cvedetector/24340 2025-05-02...

CVE-2025-2812

creationtimestamp| type| source ---|---|--- 2025-05-02 09:18:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14465 2025-05-02 11:30:24+00:00| seen| Telegram/9NKvNB1vhiQ9HCsh6KHjnVHDcPQMbEoQC5oa2MSssSFvCg4 2025-05-02 12:00:43+00:00| seen|...

CVE-2024-13858

creationtimestamp| type| source ---|---|--- 2025-05-02 07:16:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14450 2025-05-02 08:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7pqa6g22 2025-05-02 11:45:46+00:00| seen| https://t.me/cvedetector/24339 2025-05-02...

CVE-2025-3488

creationtimestamp| type| source ---|---|--- 2025-05-02 06:15:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14446 2025-05-02 08:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7pxorw2h 2025-05-02 09:15:15+00:00| seen| https://t.me/cvedetector/24334...

CVE-2025-3438

creationtimestamp| type| source ---|---|--- 2025-05-02 06:15:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14445 2025-05-02 07:19:04+00:00| seen| https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3lo6ba7iusza2 2025-05-02 08:00:39+00:00| seen|...

CVE-2025-3514

creationtimestamp| type| source ---|---|--- 2025-05-02 06:15:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14442 2025-05-02 08:00:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7paniy2e 2025-05-02 09:15:13+00:00| seen| https://t.me/cvedetector/24332...

Malicious code in twewewewest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24697bace34244c6963d54b8439296aa2903a23b68833af4712c3506830d198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3707

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14441 2025-05-02 07:34:35+00:00| seen| https://t.me/cvedetector/24312 2025-05-02 08:00:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7oog5g22...