Linux Distros Unpatched Vulnerability : CVE-2025-38329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length...

CVE-2025-24485

creationtimestamp| type| source ---|---|--- 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v 2025-07-28 15:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzws43yrx2b...

PrompTrend: Continuous Community-Driven Vulnerability Discovery and Assessment for Large Language Models

Static benchmarks fail to capture LLM vulnerabilities emerging through community experimentation in online forums. We present PrompTrend, a system that collects vulnerability data across platforms and evaluates them using multidimensional scoring, with an architecture designed for scalable...

CVE-2025-40599

creationtimestamp| type| source ---|---|--- 2025-07-23 13:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114902825699139308 2025-07-23 16:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunhlbma7p27 2025-07-24 10:18:53+00:00| seen|...

CVE-2025-48933

creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumrugl3oi2n 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d...

CVE-2025-5681

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:39+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

Zeek 7.0.9

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 Detection Framework A comprehensive security m...

A Deep Dive into a Modular Malware Family

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🌞 Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

Cisco Meraki Detection

Binary data ciscomerakidetect.nbin...

TencentOS Server 4: suricata (TSSA-2024:1082)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1082 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in incorrect session duration settings, which allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to incorrect session duration settings. Exploiting these vulnerabilities can allow attackers operating remotely to compromise...

GO-2025-3705 zot logs secrets in zotregistry.dev/zot

zot logs secrets in zotregistry.dev/zot...

CVE-2013-5563

Cross-site scripting XSS vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System CS-MARS allows remote attackers to inject arbitrary web script or HTML via the isnowLatency parameter, aka Bug ID CSCul16173...

Content Security Policy Missing 'Report-To'

Content Security Policy CSP is a web security standard that helps to mitigate attacks like cross-site scripting XSS, clickjacking or mixed content issues. CSP provides mechanisms to websites to restrict content that browsers will be allowed to load. The 'report-to' directive allows websites to...

Zeek 7.0.8

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

CVE-2024-53827

creationtimestamp| type| source ---|---|--- 2025-05-16 09:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpboai2hy62t 2025-05-16 12:34:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114517531567426020...

Zeek 7.0.7

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

CVE-2025-1304

creationtimestamp| type| source ---|---|--- 2025-05-01 05:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114431001193499369 2025-05-01 05:56:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mskmmtd2p 2025-05-01 07:01:28+00:00| seen|...

CVE-2025-3928

creationtimestamp| type| source ---|---|--- 2025-04-25 16:07:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13467 2025-04-25 16:55:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114399649375357267 2025-04-25 17:19:51+00:00| seen|...