OSV-2025-469 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424653416 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup ndpidetectionprocesspacket fuzzconfig.cpp...

OSV-2025-467 Security exception in java.base/java.lang.StringUTF16.newBytesFor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424839378 Crash type: Security exception Crash state: java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.AbstractStringBuilder.inflate java.base/java.lang.AbstractStringBuilder.append...

PT-2025-25523 · Javahongxi · Whatsmars

Name of the Vulnerable Software and Affected Versions: javahongxi whatsmars version 2021.4.0 Description: A problem has been found that affects the initialize function of the file...

PHPGurukul Nipah virus Testing Management System 代码注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. A cross-site scripting vulnerability exists in the Nipah Virus Testing Management System due to improper handling of the serachdata parameter in the /search-report.php file. An attacker could use this vulnerability to...

PT-2025-27960

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the atmtcp c send function in the Linux kernel, where it accesses skb-data as struct atmtcp hdr after checking if skb-len is 0, but this check is not sufficient...

CGA-PRX6-JQF9-J3W5

Bulletin has no description...

PT-2025-26805 · Git +1 · Xmlsec

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The software is susceptible to a heap-buffer-overflow write issue. The crash state involves the functions xmlParsePubidLiteral, xmlParseExternalID, and xmlParseNotationDecl. Recommendations...

Brotli decompression bomb DoS

This report is not public...

CVE-2025-5337

creationtimestamp| type| source ---|---|--- 2025-06-14 09:35:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18375 2025-06-14 13:25:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrl2h65l7s2o...

CVE-2025-50148

creationtimestamp| type| source ---|---|--- 2025-06-14 07:21:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkg2v7mwt2p...

OSV-2025-457 Heap-buffer-overflow in xmlParsePubidLiteral

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424242614 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlParsePubidLiteral xmlParseExternalID xmlParseEntityDecl...

PT-2025-26667 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The software is susceptible to a heap-buffer-overflow write issue. The crash occurs during the execution of the xmlParsePubidLiteral, xmlParseExternalID, and xmlParseEntityDecl functions...

PT-2025-26668 · Git +1 · Xmlsec

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The software contains a heap-buffer-overflow vulnerability. The crash state indicates the issue occurs within the xmlParsePubidLiteral, xmlParseExternalID, and xmlParseDocTypeDecl functions...

CVE-2025-24919

creationtimestamp| type| source ---|---|--- 2025-06-13 22:37:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18347 2025-06-13 23:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrjkueqdv52r 2025-08-06 13:05:54+00:00| seen|...

CVE-2025-48914

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18316 2025-06-13 17:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrixouteeg2k 2025-06-13 20:02:32+00:00| seen|...

CVE-2025-49580

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18312 2025-06-13 17:05:18+00:00| published-proof-of-concept| Telegram/LbSE4ui0deWaIbAIySI6HyoY8sH4t9aZhKhv-gkpgMW3iE 2025-06-13 17:35:32+00:00| seen|...

Brotli decompression bomb DoS

Description urllib3 can not stream brotli-encoded responses properly unlike the way it handles gzip responses. It always loads entire decompressed response body into memory when reading brotli-encoded response, which allows malicious servers to perform DoS attack by responding with decompression...

Full system file read and delete via GET /api/v1/images/download/{bulk_download_item_name}

Description For invokeai version v6.0.0a1 and below, there is an endpoint for bulk downloading zip file. With some manipulation of the filename arguments, attacker can read and also delete any files on the server through this endpoint. P/S: Tested on Windows Proof of Concept Request: GET...

Automattic: Woocommerce SQL Injection in WC_Report_Coupon_Usage

A SQL injection vulnerability was found in the WooCommerce plugin version 9.9.3. The vulnerable parameter was 'couponcodes' in the '/wp-admin/admin.php?page=wc-reports&tab=orders&report=couponusage' endpoint. The vulnerability required the privilege to view reports...

CVE-2025-4584

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmeventlist' shortcode in all versions up to, and including, 1.2.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...