Denial of Service Vulnerability in Multiple Advantech Products

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A denial of service vulnerability exists in multiple Advantech products, which can be exploited by attackers to cause a denial of service...

CVE-2025-6651

PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2025-6417

creationtimestamp| type| source ---|---|--- 2025-06-21 20:45:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19128 2025-06-21 23:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5r46aotd2a 2026-07-22 05:00:05+00:00| seen|...

CVE-2025-6340

creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18943 2025-06-20 13:48:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls26jcvyn62u...

CVE-2025-20260 ClamAV PDF Scanning Buffer Overflow Vulnerability

A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service DoS condition, or execute arbitrary code on an affected device. This vulnerability exists because memory buffers are allocated...

CVE-2022-50104

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: Fix refcount leak in xivegetmaxprio offindnodebypath returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50084

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidstatus There is this warning when using a kernel with the address sanitizer and running this testsuite: https://gitlab.com/cki-project/kernel-tests/-/tree/main/storage/swraid/scsiraid...

CVE-2022-50191

CVE-2022-50191 affects the Linux kernel regulator subsystem (of:), describing a refcount leak in the handling of of_get_regulation_constraints(). The remedy is a fixed lifecycle management: call of_node_put() on the reference returned by of_get_child_by_name() which had its refcount increased. Co...

CVE-2022-50135

Summary (CVE-2022-50135): In the Linux kernel, the RDMA/rxe path contains a bug where, during error handling in rxe_qp_from_init, the qp’s rcq and scq are set to NULL, but later in rxe_qp_do_cleanup they are dereferenced (qp->scq->num_wq and qp->rcq->num_wq). This results in a null-pt...

CVE-2022-50097

CVE-2022-50097 affects the Linux kernel’s video fbdev s3fb driver. The bug arises in s3fb_set_par() where the code computes screen_size from user input and can exceed info->screen_size, leading to a kernel PAGE_FAULT on write (local access) during memset_io. The issue is mitigated by the docum...

CVE-2022-49951

CVE-2022-49951 concerns the Linux kernel firmware_loader use-after-free during unregister. In firmware_upload_unregister(), device_unregister() could free fw_upload_priv via dev_release before module_put() dereferences it. The documented fix copies fw_upload_priv->module to a local variable an...

CVE-2025-49258

creationtimestamp| type| source ---|---|--- 2025-06-17 16:18:20+00:00| seen| Telegram/SCENl0bmebBo-isLeSjNn7zy-WAXbtsdyq9JC-AqVlk7Uo 2025-06-18 15:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18767...

CVE-2025-6020

creationtimestamp| type| source ---|---|--- 2025-06-17 11:22:14+00:00| seen| https://seclists.org/oss-sec/2025/q2/258 2025-06-17 13:36:33+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lrsmgvbqim2g 2025-06-17 13:39:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18584...

CVE-2025-5209

creationtimestamp| type| source ---|---|--- 2025-06-17 06:39:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18569...

CVE-2025-22238

creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvuuxu5im2 2025-06-13 07:33:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18275 2025-06-13 11:06:16+00:00| seen|...

Computational Attestations of Polynomial Integrity Towards Verifiable Machine-Learning

Machine-learning systems continue to advance at a rapid pace, demonstrating remarkable utility in various fields and disciplines. As these systems continue to grow in size and complexity, a nascent industry is emerging which aims to bring machine-learning-as-a-service MLaaS to market. Outsourcing...

June 2025 Patch Tuesday: Microsoft Fixes 66 Bugs, Including Active 0-Day

June 2025 Patch Tuesday fixes 66 bugs, including a zero-day in WebDAV. Update Windows, Office, and more now to block active threats...

CVE-2025-32721

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-11 04:33:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18054...

CVE-2025-32710

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 17:47:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114660319137897923 2025-06-11 09:04:03+00:00| seen|...

CVE-2025-43699

creationtimestamp| type| source ---|---|--- 2025-06-10 12:45:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659134321706802 2025-06-10 15:30:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17897...