SAMSUNG多款产品 安全漏洞

SAMSUNG Exynos 980 and others are products of the South Korean company Samsung SAMSUNG.SAMSUNG Exynos 980 is a first 5G integrated Soc product and the world's first A77 architecture processor.SAMSUNG Exynos 990 is a mobile processor.SAMSUNG Exynos 850 is a mobile SAMSUNG Exynos 850 is a mobile...

SAMSUNG Mobile Processor Exynos 安全漏洞

SAMSUNG Mobile Processor Exynos is a system-on-chip SoC from South Korea's Samsung SAMSUNG dedicated to smartphones and tablets. A security vulnerability exists in SAMSUNG Mobile Processor Exynos July 2025 and earlier, which stems from an out-of-bounds read of q-bufs in the isdoneforme function...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablet computers.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products that stems fro...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from improper handling of symbolic links and could result in an...

EUVD-2025-37522

MantisBT lacks verification when changing a user's email address...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which can be exploited by an attacker to cause a...

EUVD-2025-37375

Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete control of the device...

EUVD-2020-0023

Ansible does not collect garbage after playbook run...

CVE-2025-11806

creationtimestamp| type| source ---|---|--- 2025-10-31 03:31:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4hk2latxj2a...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from an improper implementation in V8...

CVE-2025-63454

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the deviceId parameter in the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-8850

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication 2FA flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend do...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-11881

creationtimestamp| type| source ---|---|--- 2025-10-30 07:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fhhc6dyc2k...

PDFMathTranslate 安全漏洞

PDFMathTranslate is a PDF translation software by Byaidu Personal Developer. A security vulnerability exists in PDFMathTranslate version 1.9.9, which stems from improper handling of the file parameter and could lead to a redirection attack...

CVE-2025-58183

CVE-2025-58183 affects tar.Reader parsing of GNU sparse maps in tar pax 1.0. The root cause is an absence of a maximum size on the number of sparse region blocks, enabling unbounded memory growth when reading the archive, and potentially large allocations when source data is compressed. Public ad...

CVE-2025-64147

Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-64135

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb8 and earlier sets the Java system property jdk.http.auth.tunneling.disabledSchemes to an empty value, disabling a protection mechanism of the Java runtime...

CVE-2025-64141

creationtimestamp| type| source ---|---|--- 2025-10-29 13:52:03+00:00| seen| Telegram/nVhW6co5KZuiXy2Ir2tpQUje2-UIiEMhSNjLPNCs6VfARQ...

CVE-2025-64226 WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in colabrio Stockie Extra stockie-extra allows Cross Site Request Forgery.This issue affects Stockie Extra: from n/a through = 1.2.11...