CVE-2025-32422

creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:39+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2026-06-18 18:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molgis6kux2a...

CVE-2025-32596

creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:39+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...

Linux Distros Unpatched Vulnerability : CVE-2024-35916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck If due to a memory allocation failure...

Linux Distros Unpatched Vulnerability : CVE-2021-23963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over...

The vulnerability of the IBM Aspera Faspex file-sharing application, related to incorrect session expiration times, allows attackers to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...

Meta accessed women’s health data from Flo app without consent, says court

A jury has ruled that Meta accessed sensitive information from a woman's reproductive health tracking app without consent. The app in question is called Flo Health. Developed in 2015 in Belarus to track menstrual cycles, it has evolved over the years as a tracking app for highly detailed, intimat...

smb: client: fix potential deadlock when reconnecting channels

...

Efficient Mediated Multiparty Semi-Quantum Secret Sharing Protocol Based on Single-Qubit Reordering

Typical multiparty semi-quantum secret sharing MSQSS protocols require the dealer to possess full quantum capabilities, while the classical users usually need to perform three operations. To address this practical limitation, this paper introduces a new mediated MSQSS protocol that enables Alice,...

SUSE CVE-2025-52996

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...

CVE-2025-7500

The Ocean Social Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via social icon titles in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

A week in security (July 28 – August 3)

Last week on Malwarebytes Labs: Apple ID scam leads to $27,000 in-person theft of Ohio man OpenAI kills "short-lived experiment" where ChatGPT chats could be found on Google Trump Administration and Big Tech want you to share your health data Prison visitor details shared with all inmates at...

CVE-2025-7500

The Ocean Social Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via social icon titles in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2025-7500 Ocean Social Sharing <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ocean Social Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via social icon titles in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2025-7500

The CVE-2025-7500 entry concerns Ocean Social Sharing for WordPress. The vulnerability is a Stored Cross-Site Scripting flaw in social icon titles caused by insufficient input sanitization and output escaping, affecting all versions up to 2.2.1. Exploitation requires authenticated access at Contr...

WordPress plugin Ocean Social Sharing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-31737 · WordPress · Ocean Social Sharing

Name of the Vulnerable Software and Affected Versions: Ocean Social Sharing plugin for WordPress versions prior to 2.2.2 Description: The Ocean Social Sharing plugin for WordPress is susceptible to Stored Cross-Site Scripting through social icon titles due to insufficient input sanitization and...

PT-2025-31704 · Localsend · Localsend

Name of the Vulnerable Software and Affected Versions: LocalSend versions 1.16.1 and earlier Description: LocalSend is an open-source application designed for secure file and message sharing between nearby devices on local networks without requiring an internet connection. A critical...

UBUNTU-CVE-2023-32251

A vulnerability has been identified in the Linux kernel's ksmbd component kernel SMB/CIFS server. A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the...

Trump Administration and Big Tech want you to share your health data

US President Donald Trump announced a loose plan Wednesday to allow Americans to voluntarily upload and port their medical records across hospitals, clinics, technology companies, and health apps, with broad participation from Google, Apple, OpenAI, Amazon, and more. While the system could help...

ClipBucket 安全漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A security vulnerability exists in ClipBucket 2.6 and earlier versions, which stems from an unauthenticated ofcuploadimage.php endpoint that could lead to arbitrary fil...