BELL-CVE-2025-40238

Bulletin has no description...

CVE-2025-34291

creationtimestamp| type| source ---|---|--- 2025-12-05 22:37:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115669352580293240 2025-12-05 22:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7blfxhfwd2n 2025-12-06 15:19:26+00:00| seen|...

CVE-2018-14606 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-66566

yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is...

CVE-2025-52493

creationtimestamp| type| source ---|---|--- 2025-12-05 14:52:10+00:00| seen| https://s.ovalerio.net/users/dethos/statuses/115667521394819481 2026-01-02 15:06:52+00:00| published-proof-of-concept| Telegram/tl7ZkdWd3jypcKJxG02Ippoc2qeVaXdMcRN35QCe67VLbs...

CVE-2025-12189

creationtimestamp| type| source ---|---|--- 2025-12-05 12:50:46+00:00| seen| https://gist.github.com/Darkcrai86/29f4504c5c79ab033b50ecb7e25c0dfb...

CVE-2025-13614

creationtimestamp| type| source ---|---|--- 2025-12-05 10:03:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/115666388714603308 2025-12-05 10:03:49+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7aabwqkrt2s 2025-12-05 10:54:54+00:00| seen|...

EUVD-2025-201351

Not used...

EUVD-2025-201352

Not used...

EUVD-2025-201346

Not used...

CVE-2025-66563

creationtimestamp| type| source ---|---|--- 2025-12-05 03:01:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77ip3fu4k26...

EUVD-2025-201315

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...

CVE-2025-32898

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 5...

CVE-2024-58275

creationtimestamp| type| source ---|---|--- 2025-12-04 23:38:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m775d6yu4e2w...

CVE-2025-66506

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Prior to 1.8.3, function identity.extractIssuerURL splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious...

CVE-2025-12026

creationtimestamp| type| source ---|---|--- 2025-12-04 22:08:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115663574444372667 2025-12-04 23:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m773hv54g22n...

Your year-end infosec wrapped

Welcome to this week's edition of the Threat Source newsletter. " They say that a person's personality is the sum of their experiences. But that isn't true, at least not entirely, because if our past was all that defined us, we'd never be able to put up with ourselves. We need to be allowed to...

CVE-2025-40266

creationtimestamp| type| source ---|---|--- 2025-12-04 18:25:01+00:00| seen| https://gist.github.com/Darkcrai86/bfbf0978c47314bee20db79207a9320a 2025-12-04 19:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76ojcui4y2q 2026-03-19 00:00:00+00:00| seen|...

CLSA-2025-1764868292 Fix CVE(s): CVE-2025-1094

SECURITY UPDATE: improper neutralization of quoting syntax in libpq functions allows SQL injection via psql in certain usage patterns - debian/patches/CVE-2025-1094.patch: Fix handling of invalidly encoded data in escaping functions - CVE-2025-1094...

DEBIAN-CVE-2025-40260

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...