4280 matches found
CVE-2025-47318 Buffer Over-read in BT Controller
Transient DOS while parsing the EPTM test control message to get the test pattern...
CVE-2025-23271
creationtimestamp| type| source ---|---|--- 2025-09-24 14:00:24+00:00| seen| https://infosec.place/objects/ea4f2a55-27cd-4ccb-9009-d1c58a945f9f 2025-10-02 06:27:21+00:00| seen| https://gist.github.com/Darkcrai86/0bc62ffb345f900caa0ec86068df6bb1...
CVE-2024-58241
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Disable works on hciunregisterdev This make use of disablework on hciunregisterdev since the hcidev is about to be freed new submissions are not disarable...
CVE-2025-39889
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit This tests the security...
CVE-2025-46152
creationtimestamp| type| source ---|---|--- 2025-09-24 05:17:18+00:00| seen| https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a 2025-09-25 14:33:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265426624032158...
CVE-2025-55557
creationtimestamp| type| source ---|---|--- 2025-09-24 02:11:42+00:00| seen| https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc...
CVE-2025-57349
The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message key paths in versions prior to 2.3.0. The flaw arises when processing nested message keys containing special character...
CVE-2025-39873
In the Linux kernel, the following vulnerability has been resolved: can: xilinxcan: xcanwriteframe: fix use-after-free of transmitted SKB canputechoskb takes ownership of the SKB and it may be freed during or after the call. However, xilinxcan xcanwriteframe keeps using SKB after the call. Fix th...
CVE-2025-53450
creationtimestamp| type| source ---|---|--- 2025-09-23 16:49:49+00:00| seen| Telegram/xtYOSJ7IUa2J4ZdT7waQ8vSvmbVHZUwJRBkgZ5pBIPk...
CVE-2025-10848
A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /checkstudent.php. Such manipulation of the argument studentid leads to sql injection. The attack may be performed from remote. The exploit is publicly...
CVE-2025-39878
creationtimestamp| type| source ---|---|--- 2025-09-23 07:38:35+00:00| seen| https://gist.github.com/Darkcrai86/1d06b5f4be7f6b2e72e9114360dc83ee...
CVE-2025-39883
creationtimestamp| type| source ---|---|--- 2025-09-23 07:37:00+00:00| seen| https://gist.github.com/Darkcrai86/22ebb7bea2c8b617333143919f1e66f3 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2025-10836
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to th...
Adobe Commerce B2B Improper Input Validation (APSB25-88)
The version of Adobe Commerce B2B installed on the remote host it is, therefore, affected by a vulnerability as referenced in the APSB25-88 advisory. - Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validatio...
CVE-2025-10823
A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used...
CVE-2025-57916
CVE-2025-57916 : Exposure of sensitive system information in the WordPress plugin “WP System Information” may allow an unauthorized actor to retrieve embedded sensitive data. Affected: WP System Information (WordPress plugin)
CVE-2025-57926 WordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through = 4.2.18...
CVE-2025-57990 WordPress Blog Designer Plugin <= 3.1.8 - Broken Access Control Vulnerability
Missing Authorization vulnerability in solwininfotech Blog Designer blog-designer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blog Designer: from n/a through = 3.1.8...
