CVE-2025-52331

creationtimestamp| type| source ---|---|--- 2025-11-12 18:20:40+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcii6li32...

EUVD-2025-144454

Malicious code in hereis-ma-ta npm...

EUVD-2025-131962

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

EUVD-2025-131964

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a saved search with a risky command using th...

EUVD-2025-149064

Malicious code in teagood-namakai89 npm...

EUVD-2025-147259

Malicious code in uaragifa-marae-safari npm...

CVE-2025-40172

creationtimestamp| type| source ---|---|--- 2025-11-12 12:16:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gmymycsz2n 2025-11-12 14:01:00+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsrrsb6m72 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-40166

creationtimestamp| type| source ---|---|--- 2025-11-12 12:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gmbbyaoi2q 2025-11-12 13:16:52+00:00| seen| https://gist.github.com/Darkcrai86/9c2a131c9b9423369d68fbeaa013afd3 2026-04-02 17:00:00+00:00| seen|...

DEBIAN-CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

DEBIAN-CVE-2025-40121

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcrrt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcrrt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access. This...

CVE-2025-40161

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to...

CVE-2025-40173

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-neededheadroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd "net: iptunnel: prevent...

CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against &mpt3sasport-port-dev. At this point the SAS transport device may already be...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-124528

Malicious code in nestjs-dotenv-kinetic-eslint-plugin npm...

EUVD-2025-113792

Malicious code in event-nightwatch-stop-xenon npm...

EUVD-2025-131959

A Cross-Site Request Forgery CSRF in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request...

EUVD-2025-131960

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

EUVD-2025-131944

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 2019-07-08. During multi-threaded client execution, the function Iec10xScheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to...