CVE-2025-38253

creationtimestamp| type| source ---|---|--- 2025-07-09 14:15:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjyuui5xv25...

CVE-2025-21446

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...

CVE-2025-21446

CVE-2025-21446 affects Qualcomm chipsets where WLAN frame processing for BTM requests can trigger a transient Denial-of-Service when parsing vendor-specific information elements. The root cause is improper handling of vendor IEs in the WLAN firmware during BTM parsing, leading to resource exhaust...

CVE-2025-25270

An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations...

GHSA-9VFW-WX65-C872

creationtimestamp| type| source ---|---|--- 2025-07-07 19:47:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114813675213683577...

CVE-2025-20300

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles, and has read-only access to a specific alert, could suppress that...

CVE-2025-7117

creationtimestamp| type| source ---|---|--- 2025-07-07 09:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltehzl6di42v 2026-01-08 20:16:37+00:00| published-proof-of-concept| Telegram/uSoyqQ1neOSvpczYFw3ZaIsgxZ8GH3YIUEo4EhZncagPFqk...

CVE-2025-26850

The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...

Rethinking and Exploring String-Based Malware Family Classification in the Era of LLMs and RAG

Malware Family Classification MFC aims to identify the fine-grained family e.g., GuLoader or BitRAT to which a potential malware sample belongs, in contrast to malware detection or sample classification that predicts only an Yes/No. Accurate family identification can greatly facilitate automated...

CVE-2025-38232 NFSD: fix race between nfsd registration and exports_proc

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exportsproc As of now nfsd calls createprocexportsentry at start of initnfsd and cleanup by removeprocentry at last of exitnfsd. Which causes kernel OOPs if there is race between below...

When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-Box Setting

Watermarking has emerged as a promising solution to counter harmful or deceptive AI-generated content by embedding hidden identifiers that trace content origins. However, the robustness of current watermarking techniques is still largely unexplored, raising critical questions about their...

CVE-2025-6627

creationtimestamp| type| source ---|---|--- 2025-06-25 18:51:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19503 2025-06-25 21:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshkvlhbh62m 2025-06-30 20:26:59+00:00| seen|...

CLSA-2025-1750785145 tomcat: Fix of CVE-2025-31651

CVE-2025-31651: enforces rewrite rules to preventing bypass of security constraints in specific configurations...

CVE-2025-34031

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 02:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19296 2025-06-24 04:26:56+00:00| seen|...

Can One Safety Loop Guard Them All? Agentic Guard Rails for Federated Computing

We propose Guardian-FC, a novel two-layer framework for privacy preserving federated computing that unifies safety enforcement across diverse privacy preserving mechanisms, including cryptographic back-ends like fully homomorphic encryption FHE and multiparty computation MPC, as well as statistic...

CVE-2025-52542

creationtimestamp| type| source ---|---|--- 2025-06-23 16:40:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbzj5opbe2r...

CVE-2025-52937

Vulnerability in PointCloudLibrary PCL surface/src/3rdparty/opennurbs modules. This vulnerability is associated with program files crc32.C. This vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib WITHSYSTEMZLIB=FALSE...

Weakest Link in the Chain: Security Vulnerabilities in Advanced Reasoning Models

The introduction of advanced reasoning capabilities have improved the problem-solving performance of large language models, particularly on math and coding benchmarks. However, it remains unclear whether these reasoning models are more or less vulnerable to adversarial prompt attacks than their...

From Permissioned to Proof-of-Stake Consensus

This paper presents the first generic compiler that transforms any permissioned consensus protocol into a proof-of-stake permissionless consensus protocol. For each of the following properties, if the initial permissioned protocol satisfies that property in the partially synchronous setting, the...

CVE-2025-2443

CVE-2025-2443 describes a cross-site-scripting (XSS) vulnerability and content security policy bypass in GitLab Enterprise Edition (EE) under specific conditions. Affected versions are GitLab EE 16.6 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. The provided connected docum...