CVE-2025-61884

...

CVE-2025-61884

CVE-2025-61884 affects Oracle E-Business Suite Configurator Runtime UI (12.2.3–12.2.14). The vulnerability is an SSRF/unauthenticated access flaw in the Runtime UI that can disclose sensitive configuration data, with network access over HTTP required and no user interaction. Evidence and public m...

EUVD-2025-33867

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...

CVE-2025-58300

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability...

CVE-2025-58295

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:15+00:00| seen| Telegram/6WY2XRynhzp2RDycJgUXzKq9slZkJy5Rs5nEXz8Ho6xHME...

CVE-2025-23282

creationtimestamp| type| source ---|---|--- 2025-10-10 18:13:07+00:00| seen| Telegram/G3R59AZdJdeQyXfy5np-3eMrvJtl5MxCixQPJkmRop2hagg...

Wallarm: API Security Platform of the Year 2025

2025 has been one of Wallarm’s biggest years yet. In the last few months alone, we unveiled our industry-first API Revenue Protection capability, launched our next-gen Security Edge offering, were included in the 2025 Inc. 5000 list of fastest-growing private companies in America, and announced o...

CVE-2025-11189

creationtimestamp| type| source ---|---|--- 2025-10-10 11:11:35+00:00| seen| Telegram/Lui-2TDn8318OEJ6tso5ZzcuUXfND8kuYu0LPIrDB8ip0...

CVE-2025-61152

python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...

Mageia: Security Advisory (MGASA-2025-0234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BELL-CVE-2025-58185

Bulletin has no description...

CVE-2025-11550

creationtimestamp| type| source ---|---|--- 2025-10-09 18:36:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115345653610777354...

CVE-2025-39955

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...

CVE-2025-39962

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix untrusted unsigned subtract Fix the following Smatch static checker warning: net/rxrpc/rxgkapp.c:65 rxgkyfsdecodeticket warn: untrusted unsigned subtract. 'ticketlen - 10 4' by prechecking the length of what we're tryi...

CVE-2025-2934

creationtimestamp| type| source ---|---|--- 2025-10-09 12:11:15+00:00| seen| Telegram/BDerpKV5u5UIH1BKqMTFQwUtjOiIKTqP3-Ne8mFI1Z2nYg...

RHSA-2023:5337

creationtimestamp| type| source ---|---|--- 2025-10-09 12:11:13+00:00| seen| Telegram/qxGu8k6nAfibDWvWNAcTz9A0m6a2PFLS0-ME0SuXxJZTZI...

RHSA-2023:5479

creationtimestamp| type| source ---|---|--- 2025-10-09 12:11:13+00:00| seen| Telegram/qxGu8k6nAfibDWvWNAcTz9A0m6a2PFLS0-ME0SuXxJZTZI...

CVE-2025-7526

creationtimestamp| type| source ---|---|--- 2025-10-09 06:42:51+00:00| seen| https://gist.github.com/Darkcrai86/e4de5b628a4ab7595f2047bd089bd24d...

CVE-2025-27054

creationtimestamp| type| source ---|---|--- 2025-10-09 04:10:59+00:00| seen| Telegram/D64WocRJSO-9cu1AsqdOMZfS-jNJRc2uGeoG8Ryeb63ktmk...

CVE-2025-11494

A vulnerability was found in GNU Binutils 2.45. Impacted is the function bfdx86elflatesizesections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Th...