Between a Rock and a Hard Place: Exploiting Ethical Reasoning to Jailbreak LLMs

Large language models LLMs have undergone safety alignment efforts to mitigate harmful outputs. However, as LLMs become more sophisticated in reasoning, their intelligence may introduce new security risks. While traditional jailbreak attacks relied on singlestep attacks, multi-turn jailbreak...

CVE-2025-56803

creationtimestamp| type| source ---|---|--- 2025-09-03 11:00:08+00:00| published-proof-of-concept| Telegram/xOF0wKG3E1tSWdpJ4yjov1SC7Athylo3WSDX12biA3TAo 2025-09-03 21:10:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxk622ugw27 2025-09-05 21:02:31+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-8733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GNU Bison up to 3.8.2. This affects the function obstackvprintfinternal of the file obprintf.c. Executing manipulation can lead to...

CVE-2023-3867

CVE-2023-3867 affects the Linux kernel ksmbd subsystem. It fixes an out-of-bounds read in smb2_sess_setup when a SMB2 compound request contains a second payload; processing the first payload could trigger an OOB read. The vulnerability could impact confidentiality and availability if exploited lo...

CVE-2023-3866

CVE-2023-3866 – ksmbd in the Linux kernel : The vulnerability arises from improper validation of the SMB session ID and tree ID in a compound request. If the first operation is an SMB2 ECHO, ksmbd may bypass session and tree validation, allowing work->sess and work->tcon to be NULL. A subse...

CVE-2023-3865

CVE-2023-3865 affects the ksmbd component of the Linux kernel (smb2_write). Root cause: ksmbd_smb2_check_message does not validate hdr->NextCommand; if NextCommand > Offset+Length of smb2 write, an oversized length allows an out-of-bounds read in smb2_write. Implication: out-of-bounds read ...

CVE-2023-32249

The CVE-2023-32249 issue concerns ksmbd in the Linux kernel where guest users are no longer allowed on multichannel connections. The underlying fix changes behavior to return STATUS_NOT_SUPPORTED when the binding session is a guest, effectively preventing certain guest-mediated multichannel negot...

CVE-2025-38513 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zdmactxtodev There is a potential NULL pointer dereference in zdmactxtodev. For example, the following is possible: T0 T1 zdmactxtodev / len == skbqueuelenq / while len...

MAL-2025-32504 Malicious code in rssboard (npm)

The package rssboard was found to contain malicious code...

MAL-2025-26522 Malicious code in mkfesydrknvcqupa (npm)

The package mkfesydrknvcqupa was found to contain malicious code...

SUSE SLES12 Security Update : tiff (SUSE-SU-2025:02771-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02771-1 advisory. - CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c bsc1247108 - CVE-2025-8177: Fixed possible buffer overflow in...

Linux Distros Unpatched Vulnerability : CVE-2025-38345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination an...

Linux Distros Unpatched Vulnerability : CVE-2022-50103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched, cpuset: Fix dlcpubusy panic due to empty cs-cpusallowed With cgroup v2, the cpuset's cpusallowed mask can be empty indicating that the cpuset will just u...

Linux Distros Unpatched Vulnerability : CVE-2021-46970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: pcigeneric: Remove WQMEMRECLAIM flag from state workqueue A recent change created ...

Linux Distros Unpatched Vulnerability : CVE-2025-22024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix management of listener transports Currently, when no active threads are running, a...

Linux Distros Unpatched Vulnerability : CVE-2023-38430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. CVE-2023-38430...

Linux Distros Unpatched Vulnerability : CVE-2024-40949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio When testing shmem...

Linux Distros Unpatched Vulnerability : CVE-2025-23154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix ioreqpostcqe abuse by send bundle 114.987980 T5313 WARNING: CPU: 6 PID: 531...

Linux Distros Unpatched Vulnerability : CVE-2022-50035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpubolist mutex If amdgpucsvmhandling returns r != 0,...

Linux Distros Unpatched Vulnerability : CVE-2025-22057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: decrease cached dst counters in dstrelease Upstream fix ac888d58869b net: do not delay dstentriesadd in dstrelease moved decrementing the dst count from...