UBUNTU-CVE-2025-38296

In the Linux kernel, the following vulnerability has been resolved: ACPI: platformprofile: Avoid initializing on non-ACPI platforms The platform profile driver is loaded even on platforms that do not have ACPI enabled. The initialization of the sysfs entries was recently moved from...

CVE-2025-38296 ACPI: platform_profile: Avoid initializing on non-ACPI platforms

In the Linux kernel, the following vulnerability has been resolved: ACPI: platformprofile: Avoid initializing on non-ACPI platforms The platform profile driver is loaded even on platforms that do not have ACPI enabled. The initialization of the sysfs entries was recently moved from...

CVE-2025-38266 pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms Commit 3ef9f710efcb "pinctrl: mediatek: Add EINT support for multiple addresses" introduced an access to the 'soc' field of struct mtkpinctrl in...

AMD Transient Scheduler BIOS Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD processors, which might allow loss of confidentiality. AMD is providing Platform Initialization PI firmware updates to mitigate this vulnerability. AMD has released updates to mitigate this potential vulnerabilities. HP has...

Amazon Linux 2 : cloud-init (ALAS-2025-2926)

The version of cloud-init installed on the remote host is prior to 19.3-46. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2926 advisory. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,...

Amazon Linux 2023 : cloud-init, cloud-init-cfg-ec2, cloud-init-cfg-onprem (ALAS2023-2025-1082)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1082 advisory. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the initialization of sysfs entries on non-ACPI platforms, which may result in a kernel warning...

CVE-2025-53546

creationtimestamp| type| source ---|---|--- 2025-07-09 14:42:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114823801833628508 2025-07-09 16:05:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltk6z3xql62y 2025-08-06 01:04:19+00:00| seen|...

CVE-2025-38262

In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices are probing, a concurrency race can occur. If one thread calls uartregisterdriver function, which first allocates and assigns memory to...

CVE-2025-36600

creationtimestamp| type| source ---|---|--- 2025-07-08 14:29:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818085049521205 2025-07-08 14:29:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818085811410163 2025-07-08 16:28:12+00:00| seen|...

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

A newly released report by cybersecurity firm CTM360 reveals a large-scale scam operation utilizing fake news websites—known as Baiting News Sites BNS—to deceive users into online investment fraud across 50 countries. These BNS pages are made to look like real news outlets: CNN, BBC, CNBC, or...

Microsoft MPEG-2 Video Extension 安全漏洞

Microsoft MPEG-2 Video Extension is a Microsoft Corporation USA playback of MPEG video in popular video applications on Windows 10 devices. A security vulnerability exists in Microsoft MPEG-2 Video Extension. An attacker could exploit the vulnerability to remotely execute code. The following...

webkitgtk: Input validation issue leading to cross site scripting attack

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

webkitgtk: Memory corruption leading to arbitrary code execution

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

webkitgtk: A malicious website may exfiltrate data cross-origin

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information...

webkitgtk: input validation issue may lead to a cross site scripting

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack...

webkitgtk: Type confusion leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2025-32463

creationtimestamp| type| source ---|---|--- 2025-06-30 14:19:50+00:00| seen| https://seclists.org/oss-sec/2025/q2/288 2025-06-30 16:28:09+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lstm3pbudj2g 2025-06-30 16:47:26+00:00| seen|...

K000152189: Intel BIOS vulnerability CVE-2022-21233

Security Advisory Description Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access. CVE-2022-21233 Impact This vulnerability may allow a privileged user to potentially enable information disclosu...

GHSA-XJ56-P8MM-QMXJ

creationtimestamp| type| source ---|---|--- 2025-06-26 14:51:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19608 2025-06-30 14:23:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114772764637719413 2025-06-30 14:29:11+00:00| seen|...