GHSA-P6VW-W3P8-4G72

creationtimestamp| type| source ---|---|--- 2025-08-11 18:08:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115011465274606119...

GO-2025-3822 Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources in goauthentik.io

Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources in goauthentik.io. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

CVE-2025-34151

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

CVE-2025-8829

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002 2026-01-23 21:03:07+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxqdgll2i 2026-06-23 14:03:57+00:00| exploited|...

CVE-2025-8830

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

CVE-2025-8828

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

GHSA-6JCC-XGCR-Q3H4

creationtimestamp| type| source ---|---|--- 2025-08-11 14:53:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010699412249493...

BIT-LIBPHP-2024-8927 cgi.force_redirect configuration is bypassable due to the environment variable collision

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, HTTPREDIRECTSTATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP...

BIT-LIBPYTHON-2024-4032 Incorrect IPv4 and IPv6 private ranges

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the isprivate and isglobal properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and...

CVE-2025-8747

creationtimestamp| type| source ---|---|--- 2025-08-11 09:01:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lw4gprlg442m 2025-08-11 11:51:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw4q7h3ze52a 2025-08-11 22:55:09+00:00| published-proof-of-concept|...

CGA-MP7C-924P-6RX6

Bulletin has no description...

CVE-2025-27577

creationtimestamp| type| source ---|---|--- 2025-08-11 05:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw44flgpzh2e...

PT-2025-35962

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where reading /proc/kthread/arch status can cause a NULL pointer dereference when CONFIG X86 DEBUG FPU is enabled. This occurs because the AVX-512...

Linux Distros Unpatched Vulnerability : CVE-2025-21887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup The issue was caused by...

Linux Distros Unpatched Vulnerability : CVE-2024-46866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: add missing bo locking in showmeminfo bomeminfo wants to inspect bo state lik...

Linux Distros Unpatched Vulnerability : CVE-2025-38385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in netifnapidellocked on disconnect Remove redundant netifnapide...

Linux Distros Unpatched Vulnerability : CVE-2025-37915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netsched: drr: Fix double list add in class with netem as child qdisc As described in Gerrard's report 1, there are use cases where a netem child qdisc will mak...

Linux Distros Unpatched Vulnerability : CVE-2024-42270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr- deref in iptablenattableinit. We had a report that...

Linux Distros Unpatched Vulnerability : CVE-2025-21840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header The intel-lpm...

Linux Distros Unpatched Vulnerability : CVE-2021-47088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with kdamondlock DAMON debugfs interface iterat...