CVE-2025-8093

creationtimestamp| type| source ---|---|--- 2026-01-05 16:05:08+00:00| seen| Telegram/IEZ6cogSdNdT5EWieomNDj8YJiNp4nPJLapvMP3vG-VLxk...

Authentication Bypass

Signal K Server is vulnerable to Authentication Bypass. The vulnerability is due to unauthenticated exposure of WebSocket server events and access-request status endpoints, which allows an attacker to enumerate request IDs and poll their status to steal plaintext JWT tokens and fully hijack...

CVE-2025-15449

creationtimestamp| type| source ---|---|--- 2026-01-05 04:29:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnm2d4gqd22...

PT-2026-1423

CVE-2025-69291 - Apache Unassigned Vulnerability CVE ID : CVE-2025-69291 Published : Jan. 5, 2026, 7:15 p.m. | 2 hours, 35 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues...

PT-2026-1251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's crypto subsystem, specifically within the starfive implementation. The sg nents for len function's return value was incorrectly assigned to an unsigne...

CVE-2025-15462

creationtimestamp| type| source ---|---|--- 2026-01-04 18:08:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115838162555165469 2026-01-05 07:41:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnwrsmc3p2u 2026-01-05 08:02:10+00:00| published-proof-of-concep...

CVE-2026-0576

creationtimestamp| type| source ---|---|--- 2026-01-04 11:00:38+00:00| published-proof-of-concept| Telegram/WAeIMp-qLoix2fMN5m4VAPW7c3mTPvm4gc9HGkPHwEa3bG0 2026-01-04 12:49:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblxjyyw4q2c...

[SECURITY] Fedora 42 Update: nginx-mod-vts-0.2.4-4.fc42

Nginx virtual host traffic status module...

GHSA-MQHG-V22X-PQJ8

creationtimestamp| type| source ---|---|--- 2026-01-03 14:32:26+00:00| seen| Telegram/hVIsWvvgLiiMGtF82joYNFY3TrnJxWWlKsVG9afGpT3z9w 2026-01-24 22:43:23+00:00| seen| https://gist.github.com/alon710/6636c46aefa304e870a57fe8f70add59...

CVE-2025-53860

creationtimestamp| type| source ---|---|--- 2026-01-03 10:43:24+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbj7z7qnq22r...

CVE-2025-61323

creationtimestamp| type| source ---|---|--- 2026-01-03 04:02:20+00:00| seen| https://gist.github.com/Professor-mogli/b1d3e5a44cb225ea8ecf5fd51ec149e1...

CVE-2025-64120

creationtimestamp| type| source ---|---|--- 2026-01-02 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115828021584484273 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 02:26:56+00:00| seen|...

GCVE-1-2026-0002

creationtimestamp| type| source ---|---|--- 2026-01-02 20:06:08+00:00| seen| https://infosec.exchange/users/adulau/statuses/115827301939252661...

CVE-2025-65125

creationtimestamp| type| source ---|---|--- 2026-01-02 18:54:45+00:00| seen| Telegram/Ixvst1zhHfk7lKUhI5B29IEUYLZOT2b0wkW9xa8GvuAtM 2026-01-02 21:56:46+00:00| published-proof-of-concept| Telegram/VT6BfG-NV3TfbCsF7d29L1QsNikCty5LjazQa3RLsnwI...

GHSA-93JC-VQQC-VVVH

creationtimestamp| type| source ---|---|--- 2026-01-02 18:53:14+00:00| seen| Telegram/jO9dryZvES5E-gtLxGYUB48gMevmZpZHBZ7ROvZGlwCxA 2026-01-02 21:55:06+00:00| published-proof-of-concept| Telegram/y2-HSAe3hVK2HXhNkMWkTOSOUWTyek7fe8J5U8wlfTOwBA 2026-01-24 22:43:43+00:00| seen|...

CVE-2025-53398

creationtimestamp| type| source ---|---|--- 2026-01-02 15:07:32+00:00| seen| Telegram/1e04U3cjfJhVuJQMwLkQaBe-bhyzQDiMQp1rTl7mts2mA...

CVE-2025-13456

creationtimestamp| type| source ---|---|--- 2026-01-02 07:46:35+00:00| seen| https://gist.github.com/Darkcrai86/b338bd6e52cfea86fb0e1a45af4ec72d 2026-01-02 07:55:29+00:00| seen| https://gist.github.com/Darkcrai86/ea8e5bb2c22f848b1d5437968b29f602 2026-01-02 18:53:57+00:00| seen|...

CVE-2025-15413 wasm3 m3_exec.h op_CallIndirect memory corruption

A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function opSetSloti32/opCallIndirect of the file m3exec.h. Performing a manipulation results in memory corruption. The attack needs to be approached locally. The exploit is now public and may be used. Unfortunately, the project ha...

CVE-2025-15411 WebAssembly wabt wasm-decompile InsertNode memory corruption

A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. This manipulation causes memory corruption. It is possible to launch the attack on the loc...

CVE-2025-15431

creationtimestamp| type| source ---|---|--- 2026-01-01 12:57:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115819952898592287 2026-01-02 07:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbgd4k2u3n2u 2026-01-02 18:54:15+00:00| published-proof-of-concep...