CVE-2019-10579

Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

CVE-2025-37922

In the Linux kernel, the following vulnerability has been resolved: book3s64/radix : Align section vmemmap start address to PAGESIZE A vmemmap altmap is a device-provided region used to provide backing storage for struct pages. For each namespace, the altmap should belong to that same namespace. ...

Deepfakes, Scams, and the Age of Paranoia

As AI-driven fraud becomes increasingly common, more people feel the need to verify every interaction they have online...

Federated Large Language Models: Feasibility, Robustness, Security and Future Directions

The integration of Large Language Models LLMs and Federated Learning FL presents a promising solution for joint training on distributed data while preserving privacy and addressing data silo issues. However, this emerging field, known as Federated Large Language Models FLLM, faces significant...

CVE-2025-37834

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure for pfn 0x18b00e at process virtual address 0x20ffd000 Memory failure: 0x18b00e: dirty swapcache page still referenced by...

API Threat Trends: How Attackers Are Exploiting Business Logic

As businesses rely more on APIs, attackers are quick to turn that trust into opportunity. Among the most dangerous and difficult-to-detect threats are business logic exploits, which let cybercriminals manipulate legitimate functionality to gain unauthorized access, exfiltrate data, or disrupt...

CVE-2025-46265

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15449 2025-05-08 00:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnooatll2h 2025-05-08 00:52:36+00:00| seen| https://t.me/cvedetector/24763 2025-05-08...

Customs and Border Protection Confirms Its Use of Hacked Signal Clone TeleMessage

CBP says it has “disabled” its use of TeleMessage following reports that the app, which has not cleared the US government’s risk assessment program, was hacked...

The Signal Clone Mike Waltz Was Caught Using Has Direct Access to User Chats

A new analysis of TM Signal’s source code appears to show that the app sends users’ message logs in plaintext. At least one top Trump administration official used the app...

CVE-2023-38951

creationtimestamp| type| source ---|---|--- 2025-05-05 17:48:55+00:00| seen| https://t.me/truesecator/7008 2025-05-05 18:01:11+00:00| seen| https://t.me/icscert/1143 2025-05-06 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lojrr7y3cr2q 2025-05-24 14:44:53+00:00|...

CVE-2023-53068

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

CVE-2025-37790

In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCKRCUFREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup...

MAL-2025-4245 Malicious code in tronlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b299597be11bab32fd63419a38161e9f3d21a6ab3ee73d1f8cb6b00e397625f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

PT-2025-21910 · Crates.Io · Macroquad

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

5 Major Concerns With Employees Using The Browser

As SaaS and cloud-native work reshape the enterprise, the web browser has emerged as the new endpoint. However, unlike endpoints, browsers remain mostly unmonitored, despite being responsible for more than 70% of modern malware attacks. Keep Aware's recent State of Browser Security report...

CVE-2025-32829

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

CVE-2025-23391

creationtimestamp| type| source ---|---|--- 2025-04-03 06:02:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llva3f5gb62r 2025-04-03 08:09:50+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3llvh7l6j2c2s 2025-04-03 20:10:05+00:00| seen|...

CVE-2025-24383

creationtimestamp| type| source ---|---|--- 2025-03-28 02:28:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9261 2025-03-28 04:03:36+00:00| seen| Telegram/HLtrfGg4M1aUeJImJnceuXbeT8M976JM0quDSG2ytouQns 2025-03-28 05:12:23+00:00| seen| https://t.me/cvedetector/21370 2025-03-28 09:10:22+00:0...

GO-2025-3552 Mattermost Fails to Restrict Bookmark Creation and Updates in Archived Channels in github.com/mattermost/mattermost-server

Mattermost Fails to Restrict Bookmark Creation and Updates in Archived Channels in github.com/mattermost/mattermost-server...

CVE-2025-21841

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fix cpufreqpolicy ref counting amdpstateupdatelimits takes a cpufreqpolicy reference but doesn't decrement the refcount in one of the exit paths, fix that...