CVE-2025-13281

creationtimestamp| type| source ---|---|--- 2025-12-01 16:37:57+00:00| seen| https://seclists.org/oss-sec/2025/q4/221 2025-12-01 18:15:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6wzun2hi52h 2025-12-02 13:56:03+00:00| seen|...

security-research

Security Research This project hosts security advisories and...

CVE-2025-59789

creationtimestamp| type| source ---|---|--- 2025-12-01 02:03:04+00:00| seen| https://seclists.org/oss-sec/2025/q4/218 2025-12-01 10:14:48+00:00| seen| https://gist.github.com/Darkcrai86/8b47c8b694c39f33003dd078926ed739 2025-12-01 11:16:51+00:00| seen|...

[SECURITY] Fedora 42 Update: pgadmin4-9.10-1.fc42

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Hello Video Codec security vulnerability

Hello Video Codec is a video codec from Tempus Ex open source. A security vulnerability exists in Hello Video Codec version v0.1.0, which stems from improper validation of inputs to the BitstreamWriter::writebits function, which could lead to a denial of service attack...

Android Security Bulletin—December 2025Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2025-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

WebStack-Guns path traversal vulnerability

WebStack-Guns is Dana Keeling individual developer of an open source web site navigation website project , backend based on Guns and Springboot. WebStack-Guns 1.0 version of a path traversal vulnerability , the vulnerability stems from the file KaptchaController.java function renderPicture...

Web Map Service XSS

The vulnerability of the Web Map Service WMS software, which is used for managing and publishing geospatial data on the OSGeo GeoServer server, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform...

Technitium DNS Server security vulnerability

Technitium DNS Server is an open source authoritative and recursive DNS server from the Technitium team. It can be used to self-host DNS servers for privacy and security. A security vulnerability exists in Technitium DNS Server version 13.2.2 and earlier, which stems from a DNS cache poisoning...

Logic Encryption: This Time for Real

Modern circuits face various threats like reverse engineering, theft of intellectual property IP, side-channel attacks, etc. Here, we present a novel approach for IP protection based on logic encryption LE. Unlike established schemes for logic locking, our work obfuscates the circuit's structure...

Reverse Engineering and Control-Aware Security Analysis of the ArduPilot UAV Framework

Unmanned Aerial Vehicle UAV technologies are gaining high interest for many domains, which makes UAV security of utmost importance. ArduPilot is among the most widely used open-source autopilot UAV frameworks; yet, many studies demonstrate the vulnerabilities affecting such systems. Vulnerabiliti...

EUVD-2025-199892

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue...

Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages

Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2007-2243 DESCRIPTION: OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user...

GHSA-HXM8-VFPQ-JRFC

creationtimestamp| type| source ---|---|--- 2025-11-27 16:04:55+00:00| seen| https://seclists.org/oss-sec/2025/q4/214...

GHSA-8WPW-VFGM-QRRR

creationtimestamp| type| source ---|---|--- 2025-11-27 16:02:24+00:00| seen| https://seclists.org/oss-sec/2025/q4/213...

WordPress AI Feeds plugin arbitrary file upload vulnerability

WordPress AI Feeds plugin is an open source software that is mainly used to generate and manage feeds for blogs. WordPress AI Feeds plugin suffers from an arbitrary file upload vulnerability that stems from the application's lack of effective validation of uploaded files. The vulnerability can be...

MAL-2025-191481 Malicious code in br2s-ui-componentlibrary_r2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6786b979a9a6378e096381748fc3546c761e95cf2631585010ca066ad5ef19 The package br2s-ui-componentlibraryr2 was found to contain malicious code. Source: ghsa-malware...

[SECURITY] Fedora 41 Update: chromium-142.0.7444.175-2.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

Caido injection vulnerability

Caido is an application from Caido open source. Designed to help security professionals and enthusiasts audit web applications efficiently and easily. An injection vulnerability exists in versions prior to Caido 0.53.0 that stems from mishandling of the Markdown renderer, which could result in an...

Formwork cross-site scripting vulnerability

Formwork is Formwork open source a flat file based content management system CMS. It is used to build and manage simple websites. A cross-site scripting vulnerability exists in Formwork versions prior to 2.2.0, which stems from an uncleaned blog tag field input that could lead to a stored...