marwer.gr Cross Site Scripting vulnerability OBB-4048936

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Infinite loop condition in Amazon.IonDotnet

Summary Amazon.IonDotnet ion-dotnet is a .NET library with an implementation of the Ion data serialization format. An issue exists in Amazon.IonDotnet and the RawBinaryReader class where, under certain conditions, an actor could trigger an infinite loop condition. Impact When reading binary Ion...

Fedora 40 : rpki-client (2025-d5fdbedb7f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d5fdbedb7f advisory. rpki-client 9.5 - rpki-client now includes arin.tal which is no longer legally encumbered. See https://www.arin.net/announcements/20250116-tal/ - rpki-client...

jobs.careerxperts.com Cross Site Scripting vulnerability OBB-4047584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

isonewswire.com Cross Site Scripting vulnerability OBB-4047524

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

From Cyber Security Incident Management to Cyber Security Crisis Management in the European Union

Incident management is a classical topic in cyber security. Recently, the European Union EU has started to consider also the relation between cyber security incidents and cyber security crises. These considerations and preparations, including those specified in the EU's new cyber security laws,...

CVE-2022-47112

7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2025-29513

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12526 2025-04-18 20:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrh7wj52c 2025-04-18 20:45:33+00:00| seen|...

Fortinet FortiAnalyzer Input Validation Error Vulnerability (CNVD-2025-12793)

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

CVE-2025-32665

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325153799279 2025-04-17 18:24:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3dnfgi2h...

The vulnerability of the ns_resolv() function in the ConnMan connection driver allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the nsresolv function in the ConnMan connection driver is related to the improper generation of error reports when processing DNS responses. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

Stable Channel Update for ChromeOS / ChromeOS Flex

M-135, ChromeOS version 16209.50.0 Browser version 135.0.7049.104, has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific...

CVE-2025-32864

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptefli2h 2025-04-16 20:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605871377600 2025-04-16 21:55:03+00:00| seen|...

CVE-2025-22061

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

DEBIAN-CVE-2025-22061

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

CVE-2025-22061 net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue()

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

CVE-2025-22061 net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue()

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a qid reporting error that could result in a kernel warning...

CVE-2025-30510

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04 2025-04-15 21:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11934 2025-04-15 22:44:07+00:00| seen|...