CVE-2025-53811

CVE-2025-53811 describes a TCC-related bypass in Mosh-Pro on macOS caused by misconfigured RunAsNode fuses. A local, unprivileged attacker could execute arbitrary code that runs with Mosh-Pro’s TCC permissions, limited to permissions the user has already granted. Additional resource access beyond...

CVE-2025-53811 TCC Bypass via misconfigured Node fuses in Mosh-Pro

The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted...

MINI-F36F-Q47X-GPF6

Bulletin has no description...

CVE-2025-43216

creationtimestamp| type| source ---|---|--- 2025-08-26 08:16:53+00:00| seen| https://vulnerability.circl.lu/bundle/c1aa3b44-ae54-436b-b3c3-a88194ecb70e...

CVE-2025-41702

creationtimestamp| type| source ---|---|--- 2025-08-26 07:23:51+00:00| seen| https://infosec.exchange/users/certvde/statuses/115093866501139038 2025-08-31 03:14:02+00:00| published-proof-of-concept| https://t.me/icscert/1309...

CVE-2024-8860

The CVE-2024-8860 case concerns the WordPress Tourfic plugin (versions up to and including 2.14.5). The vulnerability arises from missing capability checks in multiple functions (tf_order_status_email_resend_function, tf_visitor_details_edit_function, tf_checkinout_details_edit_function, tf_order...

CVE-2024-8860 Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions

The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction, tforderstatuseditfunction, tforderbulkactioneditfunction,...

CVE-2025-53511

creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:05+00:00| seen| https://infosec.place/objects/adf9eba9-608a-49fd-8326-3ef6bde042c7...

CVE-2025-9430

creationtimestamp| type| source ---|---|--- 2025-08-26 05:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqhtks6x2p...

CVE-2025-9432

creationtimestamp| type| source ---|---|--- 2025-08-26 05:00:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqb4nlsd2p...

CVE-2025-9438

creationtimestamp| type| source ---|---|--- 2025-08-26 04:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbq35kfcx2p...

CVE-2025-9470

creationtimestamp| type| source ---|---|--- 2025-08-26 04:54:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpvrkpv72w...

CVE-2025-9434

creationtimestamp| type| source ---|---|--- 2025-08-26 04:51:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpqv6aet24...

CVE-2025-8447

creationtimestamp| type| source ---|---|--- 2025-08-26 04:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbp2bqaz32o 2026-08-23 13:05:20+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtqu4sqkaz24...

CVE-2025-38675

creationtimestamp| type| source ---|---|--- 2025-08-26 01:33:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lxbeobmuss24...

CVE-2025-5302

creationtimestamp| type| source ---|---|--- 2025-08-26 00:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbc6bbpi42q...

Linux Distros Unpatched Vulnerability : CVE-2025-2136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Solaris 10 (i386): 148242-08

SunOS 5.10: SunOS 5.10x86: statd patch. Date this patch was last updated by Sun : Jan/15/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255261; scriptversion"1.1";...

Linux Distros Unpatched Vulnerability : CVE-2019-1010025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE...

Linux Distros Unpatched Vulnerability : CVE-2019-13486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion in svcstatus.c. CVE-2019-13486 Note that...