GHSA-744G-7QM9-HJH9 The TYPO3 CMS Backend has Broken Authentication in Backend MFA

Problem The multifactor authentication MFA dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful...

CVE-2025-22157

CVE-2025-22157 is a Privilege Escalation affecting Atlassian Jira Core Data Center and Server (versions 9.12.0, 10.3.0, 10.4.0, 10.5.0) and Jira Service Management Data Center and Server (versions 5.12.0, 10.3.0, 10.4.0, 10.5.0). The flaw allows an attacker to act as a higher-privileged user (CVS...

CVE-2025-37981

creationtimestamp| type| source ---|---|--- 2025-05-20 17:45:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17035 2025-05-20 20:09:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114541968902367001...

GHSA-JQQ5-WC57-F8HJ

creationtimestamp| type| source ---|---|--- 2025-05-20 17:43:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17025 2025-05-20 17:50:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114541423678244181...

CVE-2025-37965

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper Why "BUG: sleeping function called from invalid context" error. after: "drm/amd/display: Protect FPU in dml2validate/dml21validate" The populatedmlplanecfgfromplanestate us...

CVE-2025-37922

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lpmjno7sdf2m...

CVE-2025-37942

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-37904

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfsiget BUG There is a bug report that a syzbot reproducer can lead to the following busy inode at unmount time: BTRFS info device loop1: last unmount of filesystem...

CVE-2025-37951

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job times out, we check if the GPU has made any progress since the last timeout. If so, instead of resetting the hardware, we skip the reset and let the time...

CVE-2025-37942 HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUSMAX As noted by Anssi some 20 years ago, pool report is sometimes messed up. This worked fine on many devices but casued oops on VRS DirectForce PRO. Here, we're...

CVE-2025-37942

CVE-2025-37942 is described in connected advisories as a Linux kernel issue within the HID: pidff path. The root cause reported is “Make sure to fetch pool before checking SIMULTANEOUS_MAX,” indicating a logic/fence-check or data handling problem in pool management related to HID: pidff. Affected...

CVE-2025-37942

...

CVE-2025-37923

CVE-2025-37923 affects the Linux kernel tracing path. The bug is a slab-out-of-bounds write in trace_seq_to_buffer() that can copy more data than PAGE_SIZE when used by tracing_splice_read_pipe, leading to a local, high-severity impact. The root cause is an out-of-bounds copy in trace_seq_to_buff...

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Threat hunters have exposed the tactics of a China-aligned threat actor called UnsolicitedBooker that targeted an unnamed international organization in Saudi Arabia with a previously undocumented backdoor dubbed MarsSnake. ESET, which first discovered the hacking group's intrusions targeting the...

OSV-2025-384 Segv on unknown address in rtpp_refcnt_decref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=418437591 Crash type: Segv on unknown address Crash state: rtpprefcntdecref hashtablepurge rtppwrefpurge...

PT-2025-22245 · Git +1 · Rtpproxy

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software experiences a segmentation fault Segv on an unknown address during operation. The crash state involves the rtpp refcnt decref, hash table purge,...

Fedora 41 : sfnt2woff-zopfli (2025-a2a56326b3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a2a56326b3 advisory. Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits. Tenable has extracted the...

PT-2025-22286 · Intelbras · Intelbras Rf 301K

Name of the Vulnerable Software and Affected Versions: Intelbras RF 301K version 1.1.5 Description: A problematic issue has been found in the component Add Static IP, where the manipulation of the Description argument leads to cross-site scripting. This issue can be exploited remotely...

CVE-2025-46441

creationtimestamp| type| source ---|---|--- 2025-05-19 21:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkigoxswr2v...

CVE-2025-4941

creationtimestamp| type| source ---|---|--- 2025-05-19 17:39:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16901 2025-07-15 14:32:44+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3ltz4n3ncak2m...