OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...

PT-2025-19365 · Git +1 · Openthread

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow read vulnerability. The crash state indicates the issue occurs within the Cli::Utils::OutputLine,...

SUSE CVE-2025-22061

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

CVE-2025-32377

creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgyixf2d 2025-04-18 20:35:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360879207101550 2025-04-18 20:59:25+00:00| published-proof-of-concept|...

CVE-2025-25985

creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgkrn42g 2025-04-18 20:59:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12546 2025-04-18 23:16:07+00:00| seen|...

CVE-2025-25983

creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrg4wbm2g 2025-04-18 20:59:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12540 2025-04-18 23:16:06+00:00| seen|...

CVE-2025-28237

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12512 2025-04-18 19:34:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6qfyek2 2025-04-18...

GHSA-8JV7-77JW-H646

creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12504...

GHSA-MG2H-6X62-WPWC Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass

Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by providing a slightly altered content type such as with different casing or altered whitespacing before ;. Users using the the following pattern are affected: ...

indiaflora-ces.iisc.ac.in Cross Site Scripting vulnerability OBB-4046981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3056

creationtimestamp| type| source ---|---|--- 2025-04-18 08:59:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12409 2025-04-18 16:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fpkqnk2u...

CVE-2025-39930

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12396 2025-04-18 09:14:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3brjurnbs2...

CVE-2025-37925

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type Syzbot has reported the following BUG: kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted...

DEBIAN-CVE-2025-37925

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type Syzbot has reported the following BUG: kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted...

UBUNTU-CVE-2025-37925

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type Syzbot has reported the following BUG: kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted...

CVE-2025-37925

The CVE-2025-37925 entry concerns a Linux kernel vulnerability in the JFS filesystem. When finalizing an on-disk inode, clear_inode() could encounter an unknown type and trigger a kernel BUG; the root cause is an invalid handling path for on-disk inode types, where types 5–15 are reserved. The fi...

CVE-2025-37925 jfs: reject on-disk inodes of an unsupported type

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type Syzbot has reported the following BUG: kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted...

CVE-2025-39471

creationtimestamp| type| source ---|---|--- 2025-04-18 04:58:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12389 2025-04-18 06:23:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2ybycm522r 2025-04-18 06:48:54+00:00| seen|...

greenevers-nc.apexportapottyrental.com Cross Site Scripting vulnerability OBB-4046963

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3509

creationtimestamp| type| source ---|---|--- 2025-04-17 22:58:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12374 2025-04-18 02:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6kpep2h 2025-04-18 03:12:04+00:00| seen| https://t.me/cvedetector/23290 2025-04-22...