9220 matches found
CVE-2025-14761
creationtimestamp| type| source ---|---|--- 2025-12-17 20:38:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115736831023453482 2025-12-17 20:38:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115736831846545668 2026-04-29 12:50:13+00:00| seen|...
EUVD-2025-203909
A Cross-site scripting XSS vulnerability in Create/Update Item Kits in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter...
EUVD-2025-203905
An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...
EUVD-2025-203910
KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials...
EUVD-2025-203907
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2025-20393
creationtimestamp| type| source ---|---|--- 2025-12-17 17:03:45+00:00| seen| https://infosec.exchange/users/AAKL/statuses/115735906228666088 2025-12-17 17:17:20+00:00| seen| https://bsky.app/profile/pylos.co/post/3ma7645ozwk2t 2025-12-17 17:23:48+00:00| seen|...
CVE-2025-14269
creationtimestamp| type| source ---|---|--- 2025-12-17 16:25:01+00:00| seen| https://seclists.org/oss-sec/2025/q4/284 2025-12-17 17:51:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ma77ynjwfk2a 2025-12-17 21:00:04+00:00| published-proof-of-concept|...
CVE-2025-68156 vulnerabilities
Vulnerabilities for packages: nrdot-collector-k8s, coredns-fips, keda, datadog-agent, elastic-agent, nats-fips, argo-workflows-fips, elastic-agent-fips, grafana-alloy, rke2-runtime, aws-otel-collector, datadog-agent-fips, kargo, kine, nrdot-collector-k8s-fips, argo-cd, eks-distro, keda-fips,...
Lexi DiScola’s guide to global teamwork and overflowing TBRs
Welcome back to Humans of Talos. This month, Amy chats with Senior Cyber Threat Analyst Lexi DiScola from the Strategic Analysis team. Lexi's journey into cybersecurity is anything but traditional -- she brings a background in political science and French to her work tracking global cyber threats...
CVE-2025-14101
creationtimestamp| type| source ---|---|--- 2025-12-17 09:34:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/115734220437192830 2025-12-17 09:34:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ma6eaa6sr62j 2025-12-17 11:36:49+00:00| seen|...
CVE-2025-68179
In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCHWANTOPTIMIZEHUGETLBVMEMMAP As reported by Luiz Capitulino enabling HVO on s390 leads to reproducible crashes. The problem is that kernel page tables are modified without flushing corresponding TLB entries. Even ...
BELL-CVE-2025-68303
Bulletin has no description...
BELL-CVE-2025-68236
Bulletin has no description...
BELL-CVE-2025-68219
Bulletin has no description...
BELL-CVE-2025-68198
Bulletin has no description...
BELL-CVE-2025-68181
Bulletin has no description...
CVE-2025-68181
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drmputdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc drmputdev'ing to trigger it to be free'd should be done by devres. However, drmputdev is still in the probe...
CVE-2025-68168
In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager initialization in txInit was not properly initializing TxBlock0.waitor waitqueue, causing a crash when txEnd0 is called on read-only filesystems. Whe...
CVE-2025-40346
In the Linux kernel, the following vulnerability has been resolved: archtopology: Fix incorrect error check in topologyparsecpucapacity Fix incorrect use of PTRERRORZERO in topologyparsecpucapacity which causes the code to proceed with NULL clock pointers. The current logic uses !PTRERRORZEROcpuc...
CVE-2025-68196
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Cache streams targeting link when performing LT automation WHY Last LT automation update can cause crash by referencing currentstate and calling into dcupdateplanesandstream which may clobber currentstate. HOW...