CVE-2024-40664

In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...

CVE-2025-48551

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-0076

In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26441

In addattr of sdpdiscovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

From summer camp to grind season

Welcome to this week's edition of the Threat Source newsletter. This is the way the world ends This is the way the world ends This is the way the world ends Not with a bang but a whimper. - T.S. Eliot So this is how Summer Camp 2025 ends, not with a bang but a whimper. We've put the summer behind...

GHSA-9HP6-4448-45G2

creationtimestamp| type| source ---|---|--- 2025-09-04 15:35:19+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lxzhvz4hvv2d...

CVE-2025-38717

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, cassandra-reaper, zookeeper, kserve-modelmesh, spark, selenium, flyway, wildfly, cloudwatch-exporter, docker-selenium, apicurio-registry, solr, apache-activemq-artemis, druid, tez, apache-nifi, opensearch,...

CVE-2025-41033

creationtimestamp| type| source ---|---|--- 2025-09-04 13:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxza3abjzu2n...

Moderate: Red Hat Security Advisory: qt5-qt3d security update

An update for qt5-qt3d is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Reflecting on Wallarm’s Journey: Growth, Resilience, and What Comes Next

By Ivan Novikov and Stepan Ilyin When we started Wallarm, we focused on the APIs that power modern apps. We built an API-first platform, used AI from day one, and secured early patents in behavior-based detection and automated policy creation. The result: real-time, inline blocking with automatic...

CISA Adds TP-Link Wi-Fi and WhatsApp Spyware Flaws to KEV List

CISA updates its KEV List with TP-Link Wi-Fi extender and WhatsApp spyware flaws, urging users and agencies to…...

CVE-2025-9519

creationtimestamp| type| source ---|---|--- 2025-09-04 09:01:46+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxyrwbdckp2l...

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

...

CVE-2025-58357

creationtimestamp| type| source ---|---|--- 2025-09-04 01:32:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxxysrzz7m2m 2025-09-04 06:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxyk24apnx2o 2026-05-23 02:00:15+00:00| seen|...

PT-2025-35887

Name of the Vulnerable Software and Affected Versions: Android WLAN versions prior to 2025-09-05 on Google Pixel devices Description: A privilege escalation issue exists in the WLAN component of Android running on Google Pixel devices. This allows for unauthorized elevation of privileges...

PT-2025-35879

Name of the Vulnerable Software and Affected Versions: Android WLAN versions prior to 2025-09-05 on Google Pixel devices Description: A privilege escalation issue exists in the WLAN component of Android on Google Pixel devices. This allows for unauthorized access to system resources...

Ubuntu: Security Advisory (USN-7736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-48539

creationtimestamp| type| source ---|---|--- 2025-09-03 22:25:26+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3lxxoddlkol22 2025-09-04 22:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly27xbiyqm2e 2025-09-05 21:01:08+00:00|...

CVE-2025-9927 projectworlds Travel Management System viewpackage.php sql injection

A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such manipulation of the argument t1 leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might...