CVE-2025-38431

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even...

CVE-2025-8138

creationtimestamp| type| source ---|---|--- 2025-07-25 15:08:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114914497629194333...

CVE-2025-8140

creationtimestamp| type| source ---|---|--- 2025-07-25 15:08:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114914497629194333...

CVE-2025-38402

In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size probably will lead to allocation fail. Command: ethto...

CVE-2025-38370

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactions If we are rebuilding a free space tree, while modifying the free space tree we may need to allocate a new metadata block group. If we end up using multiple...

CVE-2025-02515

creationtimestamp| type| source ---|---|--- 2025-07-25 12:04:12+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luryyoszas2f...

PHPGurukul BP Monitoring Management System 安全漏洞

PHPGurukul BP Monitoring Management System is a bp monitoring management system from PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul BP Monitoring Management System, which originates from a SQL injection due to the incorrect operation of the parameter fromdate/todate ...

GHSA-VR59-GM53-V7CQ XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

Impact It's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. One can see the result of the injection with...

CLSA-2025-1753377886 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CLSA-2025-1753374522 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CVE-2025-41420

creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:28+00:00| seen| https://infosec.place/objects/9e8fca1b-b68f-4eeb-acef-1e8f38f32db1...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

Possible HTML Injection in Accept-Language header

This report is not public...

CVE-2025-26397

creationtimestamp| type| source ---|---|--- 2025-07-24 12:53:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114908305840509677 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-654/...

CVE-2025-8035

creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:21+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:02+00:00| seen| Telegram/QdjPiU3XLImoJo40f52ajZTWmtCw6dTGaxXHsES2Ysru0TI...

CVE-2025-8042

creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:38+00:00| seen| Telegram/9o4BfNtIOZ97fNW94XQZtKman2tFufd5bSC8ENSBdHyp2c...

CVE-2025-8070

creationtimestamp| type| source ---|---|--- 2025-07-24 10:16:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lupcig5lkm2s...

CVE-2025-54377

creationtimestamp| type| source ---|---|--- 2025-07-24 00:58:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luoddpdtyz22 2026-03-17 07:30:05+00:00| seen| https://bsky.app/profile/nerq-ai.bsky.social/post/3mhahavtunb2g...

GitLab 15.4 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-1299)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2025-1299 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...

The vulnerability of the xmlSchematronFormatReport() function in the Schematron Schema Report component of the libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlSchematronFormatReport function in the Schematron Schema Report component of the libxml2 library is related to the use of a null pointer during the processing of XPath expressions. Exploiting this vulnerability could allow an attacker to cause service failures by sendi...