CVE-2022-49840

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of aarch64 alignment fault if KFENCE enabled. When the size from user bpf program is an odd number, like 399, 407, etc, it will cause the...

CVE-2023-45721

creationtimestamp| type| source ---|---|--- 2025-04-30 22:14:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14185 2025-05-01 01:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo37f57hfh2h 2025-05-01 02:17:24+00:00| seen| https://t.me/cvedetector/24167...

PT-2025-18920 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a remote command execution in Red Hat Linux. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a severity of 0.0 and NA...

CVE-2025-32965

creationtimestamp| type| source ---|---|--- 2025-04-22 20:52:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114383596774137374 2025-04-22 21:04:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12980 2025-04-23 00:15:52+00:00| seen|...

CVE-2025-22088

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdmaacceptnewconn After the erdmacepputnewcep being called, newcep will be freed, and the following dereference will cause a UAF problem. Fix this issue...

CVE-2025-22059

In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk-skrmemalloc. udpenqueuescheduleskb has the following condition: if atomicread&sk-;skrmemalloc sk-skrcvbuf goto drop; sk-skrcvbuf is initialised by net.core.rmemdefault and later can be configur...

CVE-2025-30692

...

CVE-2025-32987

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

Really Simple Security 9.1.1.1 - Authentication Bypass

!/usr/bin/env python3 Exploit Title: Really Simple Security 9.1.1.1 - Authentication Bypass Date: 2024-11-19 Exploit Author: Antonio Francesco Sardella Vendor Homepage: https://really-simple-ssl.com/ Software Link: https://really-simple-ssl.com/ Version: Really Simple Security Free, Pro, and Pro...

📄 WordPress Really Simple Security 9.1.1.1 Authentication Bypass

WordPress Really Simple Security plugin version 9.1.1.1 authentication bypass proof of concept exploit. !/usr/bin/env python3 Exploit Title: Really Simple Security 9.1.1.1 - Authentication Bypass Date: 2024-11-19 Exploit Author: Antonio Francesco Sardella Vendor Homepage:...

Red Hat Enterprise Linux : Custom Repository Mapping

By leveraging the user-generated custom repository mapping file, the scan has identified one or more custom repositories used to access official Red Hat repositories to install packages. These repositories will be used in conjunction with Red Hat OS package level assessment security advisories to...

CVE-2025-22282

creationtimestamp| type| source ---|---|--- 2025-04-04 11:39:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10433 2025-04-04 13:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyici5yrh2b 2025-04-04 14:40:17+00:00| seen|...

CVE-2025-3182

creationtimestamp| type| source ---|---|--- 2025-04-03 21:35:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10357 2025-04-04 01:11:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxacudoqh2u 2025-04-04 02:06:56+00:00| seen|...

CVE-2025-31116

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The mitigation for CVE-2024-29190 in validhost uses socket.gethostbyname, which is vulnerable to SSRF abuse using DNS rebinding technique. This...

CVE-2025-3072

Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-21967

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdfreeworkstruct -interimentry of ksmbdwork could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock brea...

CVE-2025-21911

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: avoid deadlock on fence release Do scheduler queue fence release processing on a workqueue, rather than in the release function itself. Fixes deadlock issues such as the following: 607.400437...

CVE-2025-31116

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The mitigation for CVE-2024-29190 in validhost uses socket.gethostbyname, which is vulnerable to SSRF abuse using DNS rebinding technique. This...

PYSEC-2025-48

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The mitigation for CVE-2024-29190 in validhost uses socket.gethostbyname, which is vulnerable to SSRF abuse using DNS rebinding technique. This...

CVE-2025-31116 Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The mitigation for CVE-2024-29190 in validhost uses socket.gethostbyname, which is vulnerable to SSRF abuse using DNS rebinding technique. This...