CVE-2025-49175

CVE-2025-49175 describes a flaw in the X Rendering extension’s handling of animated cursors: if a client provides no cursors, the server may assume one exists, causing an out-of-bounds read and a potential crash in the X server. Connected sources identify this vulnerability affecting multiple X.o...

CVE-2025-49175

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash. Mitigation Mitigation for this issue is either not available or the currently available...

GHSA-G4GC-RH26-M3P5

creationtimestamp| type| source ---|---|--- 2025-06-16 20:20:39+00:00| seen| https://gist.github.com/safer-bot/8eded6b925c160dc08c1b28d51d6c0c3 2025-06-17 01:00:32+00:00| seen| https://gist.github.com/safer-bot/95fa9e363790e3d145320791b4d5b508 2025-06-17 01:10:34+00:00| seen|...

UBUNTU-CVE-2025-6170

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed...

CVE-2025-5485

User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or through enumerating random digit sequenc...

'No Kings’ Protests, Citizen-Run ICE Trackers Trigger Intelligence Warnings

Army intelligence analysts are monitoring civilian-made ICE tracking tools, treating them as potential threats, as immigration protests spread nationwide...

CVE-2025-49200 Unencrypted backup contains sensitive information

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1670)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-25303 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No details are provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...

Malicious code in ncftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bc7a5d34f3860004cbdbf4f622418fa2383dd3ba5ebff2ed2074a4a13d1b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5850

A vulnerability was found in Tenda AC15 15.03.05.19multi. It has been declared as critical. This vulnerability affects the function formsetschedled of the file /goform/SetLEDCf of the component HTTP POST Request Handler. The manipulation of the argument Time leads to buffer overflow. The attack c...

CVE-2025-5850

The CVE-2025-5850 entry concerns Tenda AC15 (version 15.03.05.19_multi) with a buffer overflow in the HTTP POST Request Handler’s function formsetschedled located in /goform/SetLEDCf. The Time parameter manipulation triggers the overflow, enabling remote exploitation, which has been publicly disc...

CVE-2025-5608

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2025-5780

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /viewdental.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. The...

CVE-2025-20298

In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory by default, C:\Program...

CVE-2025-5566

CVE-2025-5566 pertains to PHPGurukul Notice Board System 1.0, where the argument searchdata in the file /search-notice.php can be manipulated to trigger an SQL injection. The vulnerability is exploitable remotely and has been publicly disclosed. The available sources describe an(SQL) injection vu...

GHSA-23FP-MRFV-CWV4

creationtimestamp| type| source ---|---|--- 2025-06-04 00:05:53+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/114622172462843651 2025-06-04 00:05:59+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/17809...

Zero Critical Issues, Infinite Security Potential

Over 50% of Wiz customers have reduced their cloud risk by reaching Zero Critical Issues...

GHSA-F82J-8PP7-CW2W

creationtimestamp| type| source ---|---|--- 2025-06-02 16:45:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114614778635202833 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0...