CVE-2022-50096

In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Update kcb status flag after singlestepping Fix kprobes to update kcb kprobes control block status flag to KPROBEHITSSDONE even if the kp-posthandler is not set. This bug may cause a kernel panic if another INT3 user...

CVE-2025-6267

creationtimestamp| type| source ---|---|--- 2025-06-19 14:40:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18864 2025-06-19 17:38:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lry2vrun242r...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 9, 2025 to June 15, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

The New Frontline: Why DevOps Became a Cyber Target

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your developers didn't become...

CVE-2022-50012

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Init jump labels before parseearlyparam On 64-bit, calling jumplabelinit in setupfeaturekeys is too late because static keys may be used in subroutines of parseearlyparam which is again subroutine of earlyinitdevtree...

CVE-2025-5234

creationtimestamp| type| source ---|---|--- 2025-06-19 09:43:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18843 2025-06-19 13:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrxo263ccw2p...

CVE-2022-50011

In the Linux kernel, the following vulnerability has been resolved: venus: pmhelpers: Fix warning in OPP during probe Fix the following WARN triggered during Venus driver probe on 5.19.0-rc8-next-20220728: WARNING: CPU: 7 PID: 339 at drivers/opp/core.c:2471 devpmoppsetconfig+0x49c/0x610 Modules...

SUSE CVE-2022-49939

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref-proc caused by race condition A transaction of type BINDERTYPEWEAKHANDLE can fail to increment the reference for a node. In this case, the target proc normally releases the failed reference upon close as...

SUSE CVE-2022-49947

In the Linux kernel, the following vulnerability has been resolved: binder: fix alloc-vmavmmm null-ptr dereference Syzbot reported a couple issues introduced by commit 44e602b4e52f "binderalloc: add missing mmaplock calls when using the VMA", in which we attempt to acquire the mmaplock when...

SUSE CVE-2022-49984

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the...

GHSA-89QQ-HGVP-X37M

creationtimestamp| type| source ---|---|--- 2025-06-19 03:40:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18834 2025-06-19 03:50:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114707989654328895 2025-06-19 04:01:04+00:00| published-proof-of-concept|...

SUSE CVE-2022-50231

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-out-of-bounds in neonpoly1305blocks.constprop.0+0x1b4/0x250 poly1305neon Read of size 4 at addr ffff0010e293f010 by task...

CVE-2025-45878

A cross-site scripting XSS vulnerability in the report manager function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload...

CVE-2025-6286: URL Redirection to Untrusted Site

A vulnerability classified as problematic has been found in PHPGurukul COVID19 Testing Management System 2021. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument q leads to open redirect. It is possible to launch the attack remotely. The exploi...

CVE-2025-6285: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul COVID19 Testing Management System 2021. It has been rated as problematic. This issue affects some unknown processing of the file /search-report-result.php. The manipulation of the argument q leads to cross site scripting. The attack may be initiated remotel...

PHPGurukul COVID19 Testing Management System: Input validation error vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System has an input validation error vulnerability that originates from an open redirect due to the operation of the parameter q in the file /search-report-result.php. No detai...

PHPGurukul COVID19 Testing Management System Code Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a code injection vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter q in file...

CVE-2024-54172

creationtimestamp| type| source ---|---|--- 2025-06-18 16:43:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18787 2025-06-18 19:49:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrvrpuczpr2a...

CVE-2025-45784

creationtimestamp| type| source ---|---|--- 2025-06-18 14:41:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18747 2025-06-18 15:31:20+00:00| published-proof-of-concept| Telegram/4HBiddkipVDKS5d3LUOqCrILjbEOa9wvtuqYzTn22KSmmY 2025-06-18 15:42:11+00:00| seen|...

Path Traversal in Tokenizer Conversion Script

The script for converting slow tokenizers is vulnerable to a Path Traversal attack via the --checkpointname command-line argument. This allows an attacker to create files outside of the intended dumppath directory. Vulnerable Code Location: The vulnerability is located in the logic for converting...