CVE-2023-53820 loop: loop_set_status_from_info() check before assignment

In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and lo-losizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed t...

DEBIAN-CVE-2022-50638

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMP...

CVE-2022-50649

CVE-2022-50649 affects the Linux kernel power: supply adp5061 code path. The issue is a bounds read in adp5061_get_chg_type(): ADP5061_CHG_STATUS_1_CHG_STATUS is masked with 0x07, implying a length of 8, but the adp5061_chg_type array size is 4. This can cause reading beyond the end of the adp506...

CVE-2022-50638

CVE-2022-50638 (Linux kernel) concerns an ext4 bug_on due to a boot loader inode corruption during ioctl-based swap of boot loader inodes, causing a kernel BUG in ext4_es_end via ext4 extents logic. The issue is triggered when boot loader inode is invalid or not a normal file (S_IFREG) and extent...

CVE-2022-50638

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMP...

PT-2025-50292

Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...

Linux Distros Unpatched Vulnerability : CVE-2025-40340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kern...

PT-2025-49696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the ath11k module related to handling disconnected Wi-Fi peers. Specifically, a failure log occurs when attempting to find a peer with an ID of ...

PT-2025-49629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to an out-of-bounds read within the adp5061 get chg type function. Specifically, the ADP5061 CHG STATUS 1 CHG STATUS value is masked with 0x07...

CVE-2025-65573

Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...

CVE-2025-65573

Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...

CVE-2025-65572

AllskyTeam AllSky v2024.12.06_06 is affected by a Cross Site Scripting (XSS) flaw in the allskySettings.php handler. The vulnerability arises from parameters (config, filename, extratext) that are processed by showMessages() in status_messages.php, allowing injected scripts to be printed and exec...

GHSA-WPQC-H9WP-CHMQ

creationtimestamp| type| source ---|---|--- 2025-12-08 23:41:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115686590469006989...

CVE-2023-53752

In the Linux kernel, the following vulnerability has been resolved: net: deal with integer overflows in kmallocreserve Blamed commit changed: ptr = kmallocsize; if ptr size = ksizeptr; size = kmallocsizeroundupsize; ptr = kmallocsize; This allowed various crash as reported by syzbot 1 and Kyle...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

CVE-2025-65804

creationtimestamp| type| source ---|---|--- 2025-12-08 17:46:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115685195052401612 2025-12-08 19:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7iskxtus72x...

CVE-2025-14224

creationtimestamp| type| source ---|---|--- 2025-12-08 13:56:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684291115598440...

CVE-2025-14225

creationtimestamp| type| source ---|---|--- 2025-12-08 13:56:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684291115598440...

CVE-2025-26487

creationtimestamp| type| source ---|---|--- 2025-12-08 09:03:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/115683138567825457 2025-12-08 09:03:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7hocvq45u24 2025-12-08 10:55:26+00:00| seen|...

CVE-2025-14186

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...