CVE-2022-50672

A vulnerability was found in the Xilinx ZynqMP IPI mailbox driver in the Linux kernel. When deviceregister fails, two issues occur: the name allocated by devsetname is leaked, and a subsequent call to deviceunregister in zynqmpipifreemboxes causes a kernel crash when attempting to remove a device...

CVE-2025-14329

Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

CVE-2023-53864

In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfbplaneoverlayatomicdisable When disabling overlay plane in mxsfbplaneoverlayatomicupdate, overlay plane's framebuffer pointer is NULL. So, dereferencing it would cause a kernel OopsNULL...

CVE-2023-53860

A sleep-in-atomic-context bug was found in the Device Mapper subsystem in the Linux kernel. When processing REQNOWAIT requests, dm incorrectly submits I/O while holding an RCU read lock, assuming that REQNOWAIT means no scheduling can occur. However, mempoolalloc and other allocation functions ma...

CVE-2025-14335

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-14336

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...

CVE-2025-59808

creationtimestamp| type| source ---|---|--- 2025-12-09 19:09:33+00:00| seen| https://gist.github.com/Darkcrai86/7a2c660dd181e90c9fbe332dfac34064 2025-12-10 09:38:20+00:00| seen| https://bsky.app/profile/ahmandonk.bsky.social/post/3m7mr6xssqc2o 2025-12-11 01:12:37+00:00| seen|...

CVE-2025-59810

creationtimestamp| type| source ---|---|--- 2025-12-09 19:09:05+00:00| seen| https://gist.github.com/Darkcrai86/bfe0f2d7c6d01c2e816c59410da30e59...

CVE-2025-13924

creationtimestamp| type| source ---|---|--- 2025-12-09 19:07:02+00:00| seen| https://gist.github.com/Darkcrai86/e472400cc6746e62901500e978a8604b...

CVE-2025-14335 itsourcecode Student Management System new_school_year.php sql injection

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-14335

The CVE-2025-14335 entry concerns itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the code path handling /new_school_year.php (sy parameter manipulation). It can be exploited remotely and details have been publicly disclosed. Multiple sources (NVD, Red Hat, CV...

CVE-2025-34399

creationtimestamp| type| source ---|---|--- 2025-12-09 18:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691003669191782...

CVE-2025-62465

CVE-2025-62465 is a local Denial-of-Service vulnerability in Windows DirectX (DirectX Graphics Kernel) caused by a null pointer dereference. It affects Windows DirectX components and can be exploited locally by an authorized attacker to disrupt services. Connected sources confirm the vulnerabilit...

CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2025-13642

creationtimestamp| type| source ---|---|--- 2025-12-09 17:26:50+00:00| seen| https://gist.github.com/Darkcrai86/d26f76e584d84cce0b4f9c5a272b8e61...

CVE-2025-12941

creationtimestamp| type| source ---|---|--- 2025-12-09 17:15:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115690735515051582...

CVE-2022-50676

A potential deadlock vulnerability was found in the RDS Reliable Datagram Sockets TCP transport in the Linux kernel. In rdstcpresetcallbacks, canceldelayedworksync is called while holding the socket lock locksock. However, the worker functions rdssendxmit and rdsrecvworker may also try to acquire...

CVE-2023-53845

An infinite loop vulnerability was found in the NILFS2 filesystem in the Linux kernel. When mounting a corrupted disk image where a virtual block address is invalid, nilfsbmaplookupatlevel returns an error code that is misinterpreted by nilfsmdtgetblock. This causes an infinite loop attempting to...

CVE-2023-53820

In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and lo-losizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed t...