GHSA-Q62H-JW38-24VH

creationtimestamp| type| source ---|---|--- 2025-07-16 16:10:35+00:00| seen| https://gist.github.com/safer-bot/3089461ed1f56106d76f6c5029a20157...

Dependency on Vulnerable Third-Party Component

Overview Affected versions of this package are vulnerable to Dependency on Vulnerable Third-Party Component via the bnmpgrow function. An attacker can cause unexpected behavior or potentially execute arbitrary code by providing specially crafted input that triggers an integer overflow in the...

GHSA-VMFG-RJJM-RJRJ

creationtimestamp| type| source ---|---|--- 2025-07-16 04:38:08+00:00| seen| https://gist.github.com/safer-bot/24ff77b43c55125ac1820ae22fe0693b 2025-07-16 07:26:15+00:00| seen| https://gist.github.com/safer-bot/97cade2cef616b44f78d440689ebfa5f 2025-07-16 15:36:15+00:00| seen|...

GHSA-76H9-2VWH-W278

creationtimestamp| type| source ---|---|--- 2025-07-16 03:56:59+00:00| seen| https://gist.github.com/safer-bot/0a516166b329057e81ec35ad6fb00e3b 2025-07-16 16:29:40+00:00| seen| https://gist.github.com/safer-bot/06ba3e736cb2a22693a2da2a15674353...

CVE-2025-41239

creationtimestamp| type| source ---|---|--- 2025-07-15 18:53:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858762801914674 2025-07-16 12:20:29+00:00| seen| https://vulnerability.circl.lu/bundle/419fd7d2-3c77-4032-b717-747015a7b289 2025-07-16 12:26:04+00:00| seen|...

CVE-2025-6558

creationtimestamp| type| source ---|---|--- 2025-07-15 17:28:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858427241820895 2025-07-16 02:00:41+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lu2d3bwjds2n 2025-07-16 04:00:00+00:00| seen|...

GHSA-XQG6-5WFV-4855

creationtimestamp| type| source ---|---|--- 2025-07-15 15:28:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857955667613596...

PT-2025-32523 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 versions up to 20250801 Description: A vulnerability exists in Linksys Wi-Fi range extender models. The issue resides in the langSwitchBack function of the /goform/langSwitchBack file...

WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Email Attachment by Order Status & Products versions = 1.0.1...

CVE-2025-7564

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this...

CVE-2025-15336

creationtimestamp| type| source ---|---|--- 2025-07-13 16:29:30+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ltuc7ycdvc2q...

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

...

immich 安全漏洞

immich is a high-performance self-hosted photo and video management solution from Immich Open Source. A security vulnerability exists in versions prior to immich 1.132.0 that stems from a failure to check the oauth2 status parameter, which could lead to account hijacking...

SUSE CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

GHSA-4Q84-546J-3MF5

creationtimestamp| type| source ---|---|--- 2025-07-10 21:38:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114831099385159796...

[SECURITY] Fedora 42 Update: rust-procs-0.14.10-2.fc42

A modern replacement for ps...

CVE-2025-5023

creationtimestamp| type| source ---|---|--- 2025-07-10 12:16:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114828889362422700...

CVE-2025-46406

creationtimestamp| type| source ---|---|--- 2025-07-10 11:56:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114828809599813642...

CVE-2025-38333 f2fs: fix to bail out in get_new_segment()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in getnewsegment ------------ cut here ------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 newcurseg+0x5e8/0x6dc pc : newcurseg+0x5e8/0x6dc Call trace: newcurseg+0x5e8/0x6dc...

UBUNTU-CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...