CVE-2025-61117

Senza: Keto & Fasting Android App 2.10.15 (com.gl.senza) contains an improper access control vulnerability in the user data API endpoints. The root cause is insufficient checks in the API, allowing attackers to obtain authentication tokens and perform account takeover, potentially leading to unau...

CVE-2025-40101

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfsloadblockgroupzoneinfo the first thing we do is to ensure that if the mapping type is not a SINGLE one and there is no RAID stripe...

Slackware: Security Advisory (SSA:2025-302-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2025-36702

Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

GHSA-VFWW-5HM6-HX2J vulnerabilities

Vulnerabilities for packages: kayenta, camunda-zeebe, seata, kayenta-fips...

CVE-2025-43017

creationtimestamp| type| source ---|---|--- 2025-10-28 23:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c2vsf3s32o...

CVE-2025-60595

creationtimestamp| type| source ---|---|--- 2025-10-28 21:00:05+00:00| exploited| Telegram/p9aXpoUFZfvPwaFGC2z6wToIKsj9JEw53i6nfBS-Wl448 2025-10-29 21:27:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4efa23xaq2n 2026-06-19 12:45:49+00:00| exploited|...

CVE-2025-40025

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzbot reported below: ------------ cut here ------------ kernel BUG at fs/f2fs/file.c:1243! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5354...

CVE-2025-60858

creationtimestamp| type| source ---|---|--- 2025-10-28 18:16:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bk3ymp4k27...

CVE-2025-61043

creationtimestamp| type| source ---|---|--- 2025-10-28 17:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bhdgfqsv27 2026-03-19 11:08:16+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhfuet6rjk2u 2026-03-19 12:33:32+00:00| seen|...

CVE-2025-34308

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700...

CVE-2025-40079

creationtimestamp| type| source ---|---|--- 2025-10-28 15:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4b7yhczp52g 2025-10-30 02:38:02+00:00| seen| https://bsky.app/profile/secqube.com/post/3m4ewlokuhd2b 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40072

creationtimestamp| type| source ---|---|--- 2025-10-28 15:05:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4b7gfdexf2p...

CVE-2025-62953

creationtimestamp| type| source ---|---|--- 2025-10-28 13:51:36+00:00| seen| Telegram/ES8ddhtp4yp87HlGZtxBCGkyUON67M3-GCT640NPfZtvSFM...

CVE-2025-61128

Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...

CVE-2025-12313

creationtimestamp| type| source ---|---|--- 2025-10-27 20:14:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115447960746193669...

GHSA-XMQP-6CJ2-2HH3 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2025-41067

creationtimestamp| type| source ---|---|--- 2025-10-27 15:01:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m46oqty5vw2p 2025-11-09 21:00:05+00:00| published-proof-of-concept| Telegram/O5YbycTDCRIgU6Pu3vnrKXlazpITbIx4LolaQn1imZczg...

GHSA-R397-FF8C-WV2G vulnerabilities

Vulnerabilities for packages: airflow...

Security Bulletin: Security Vulnerability in Requests Library: .netrc Credential Leak Fixed in Version 2.32.4, affects IBM watsonx.data

Summary Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can...