CVE-2025-37747

In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred signal hadn't managed to be sent before the file got closed: perfeventoverflow taskworkaddperfpendingtask fput...

CVE-2025-37748

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtkiommudevicegroup Currently, mtkiommu calls during probe iommudeviceregister before the hwlist from driver data is initialized. Since iommu probing issue fix, it leads to NULL point...

CVE-2025-37739

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-bounds access in f2fstruncateinodeblocks syzbot reports an UBSAN issue as below: ------------ cut here ------------ UBSAN: array-index-out-of-bounds in fs/f2fs/node.h:381:10 index 18446744073709550692 is...

CVE-2025-37753

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-37743

creationtimestamp| type| source ---|---|--- 2025-05-01 13:14:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14274 2025-05-01 13:55:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo4hlqbzch2h 2025-05-01 16:30:24+00:00| seen|...

CVE-2025-4157

creationtimestamp| type| source ---|---|--- 2025-05-01 09:17:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14252 2025-05-01 09:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426bv3r222 2025-05-01 12:19:22+00:00| seen|...

CVE-2025-47154

creationtimestamp| type| source ---|---|--- 2025-05-01 08:14:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14249 2025-05-01 09:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426c3xbq2n 2025-05-01 11:00:20+00:00| published-proof-of-concept|...

CVE-2025-4154

creationtimestamp| type| source ---|---|--- 2025-05-01 07:14:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14244 2025-05-01 09:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426c7bc72j 2025-05-01 10:39:02+00:00| seen|...

CVE-2025-4099

creationtimestamp| type| source ---|---|--- 2025-05-01 05:14:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14236 2025-05-01 05:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mslbkuk2k 2025-05-01 08:58:36+00:00| seen|...

CVE-2025-4150

creationtimestamp| type| source ---|---|--- 2025-05-01 05:14:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14233 2025-05-01 05:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114431001434325513 2025-05-01 05:56:20+00:00| seen|...

CVE-2025-2774

creationtimestamp| type| source ---|---|--- 2025-05-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-282/ 2025-05-04 02:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3locqzuaxkk2q 2025-05-04 04:40:43+00:00| seen| https://t.me/CyberBulletin/10744...

CVE-2025-4143

creationtimestamp| type| source ---|---|--- 2025-05-01 01:13:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14210 2025-05-01 01:56:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo37f5g75v2e 2025-05-01 04:48:02+00:00| seen|...

CVE-2025-4144

creationtimestamp| type| source ---|---|--- 2025-05-01 01:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14209 2025-05-01 01:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo37f4ryof2e 2025-05-01 04:48:02+00:00| seen|...

WordPress Homey Theme <= 2.4.4 is vulnerable to Broken Access Control

Software Homey Type Theme Vulnerable versions = 2.4.4 Fixed in 2.4.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2025-1326 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f04df5696a52 Credits a00n Required privilege Subscriber...

Malicious code in basstiontrestbeesk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b8881eb059c7180bd2dbd7b6d31f02a7d5afc3da2401f20cf1669e23e80bdd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-46701

creationtimestamp| type| source ---|---|--- 2025-04-30 07:49:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/34783 2025-05-29 18:11:40+00:00| seen| https://seclists.org/oss-sec/2025/q2/184 2025-05-29 19:48:02+00:00| seen|...

Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abc75363d3a49d94650c8b66324e9d38506ea8e2724a1521a930555a996faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-customer-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b783a59591663bb8084e20ad8825f0dea9ab345d0ec0f723be03614c92467e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41c3f9782e1fb062bef2307e7300491d25460f761f7e9da305bc92e541c850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad870b6719a7ca56397739f03731e2e597c7008601ef058d93c6b312f6b4725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...