CVE-2025-38333 f2fs: fix to bail out in get_new_segment()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in getnewsegment ------------ cut here ------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 newcurseg+0x5e8/0x6dc pc : newcurseg+0x5e8/0x6dc Call trace: newcurseg+0x5e8/0x6dc...

UBUNTU-CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

CVE-2025-38314 virtio-pci: Fix result size returned for the admin command completion

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

GHSA-QR9H-J6XG-2J72

creationtimestamp| type| source ---|---|--- 2025-07-09 18:57:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114824801590526083...

CVE-2025-3498

creationtimestamp| type| source ---|---|--- 2025-07-09 12:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjrcpo7i32o 2025-07-09 12:47:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114823348122181943...

CVE-2025-38261

In the Linux kernel, the following vulnerability has been resolved: riscv: save the SRSUM status over switches When threads/tasks are switched we need to ensure the old execution's SRSUM state is saved and the new thread has the old SRSUM state restored. The issue was seen under heavy load...

RHSA-2024:0128

creationtimestamp| type| source ---|---|--- 2025-07-09 08:16:40+00:00| seen| Telegram/Xid2rEbpIZgsG2BPbqXcGG5cXjYDR-QtklEiINIkKPkFuE...

CVE-2025-7217

creationtimestamp| type| source ---|---|--- 2025-07-09 05:40:59+00:00| seen| https://bsky.app/profile/potato.software/post/3ltj44rmweu2b...

CVE-2025-53513

creationtimestamp| type| source ---|---|--- 2025-07-08 17:16:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818741708384892 2025-07-08 20:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti5v5lv4g2o 2026-01-08 12:01:07+00:00| published-proof-of-concept|...

CVE-2025-47988

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 17:27:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818787872569368...

CVE-2025-21466

creationtimestamp| type| source ---|---|--- 2025-07-08 13:19:01+00:00| seen| https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30...

CVE-2019-13232

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:42+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...

CVE-2019-13638

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:39+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08 07:10:49+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2...

CVE-2025-42963

creationtimestamp| type| source ---|---|--- 2025-07-08 01:16:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114814969134379111 2025-07-16 17:11:07+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5gtfk2k 2025-07-16 17:11:09+00:00| seen|...

CVE-2025-42973

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

CVE-2025-42973 Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

PT-2025-28522 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to improper control of generation of code, also known as 'code injection', in Azure Monitor Agent. This allows an unauthorized attacker to execute code over...

CVE-2025-53374

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated low-privileged account can retrieve detailed profile information about another users in the same organization by directly invoking user.one. The...

CVE-2025-7102

creationtimestamp| type| source ---|---|--- 2025-07-07 01:28:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114809353116365272 2025-07-07 04:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltdxsjrzye2m...

NuGet Package 'ModelContextProtocol' Detection

The remote host has a 'ModelContextProtocol' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...