9223 matches found
CVE-2025-38726
creationtimestamp| type| source ---|---|--- 2025-09-04 19:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxzwfieiie23...
CVE-2025-38709
In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device block size is changed underneath a mounted filesystem. This causes a mismatch between the block device block size and the...
CVE-2025-38679
In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The eventseqchanged handler processes a variable number of properties sent by the firmware. The number of properties is indicated by the firmware and used t...
CVE-2025-38710
In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate idepth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in direread, causing an undefined shift by 32 at: index = hash 32 - dip-idepth; As calculated in an open-coded way in...
CVE-2025-38700
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsiconn-dddata only if memory is allocated In case of an ibfastregmr allocation failure during iSER setup, the machine hits a panic because iscsiconn-dddata is initialized unconditionally, even when n...
CVE-2025-38707
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size...
CVE-2025-38679
In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The eventseqchanged handler processes a variable number of properties sent by the firmware. The number of properties is indicated by the firmware and used t...
CVE-2025-41047
creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:36+00:00| seen| Telegram/ppfKIcZAnQTYWblNpZgJsmWmDAVSfAiIedNuCzOfC7yXA0...
CVE-2025-58057
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted...
A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.
...
CVE-2025-9935
creationtimestamp| type| source ---|---|--- 2025-09-04 05:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxygwnjrwx2z...
CVE-2025-9937
creationtimestamp| type| source ---|---|--- 2025-09-04 05:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxyfbz44l52o...
CVE-2025-9937 elunez eladmin LocalStorageController deleteFile improper authorization
A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited...
CVE-2025-9935
The CVE-2025-9935 entry concerns TOTOLINK N600R version 4.3.0cu.7866_B20220506. The issue affects the function sub_4159F8 in /web_cste/cgi-bin/cstecgi.cgi, where manipulation can lead to a remote command injection. The exploit is publicly disclosed and may be utilized. Multiple connected sources ...
CVE-2025-52915
creationtimestamp| type| source ---|---|--- 2025-09-03 21:15:06+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lxxkgo4qca2x 2025-09-04 12:30:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/50243 2025-10-15 10:20:48+00:00| published-proof-of-concept|...
CVE-2025-47910
creationtimestamp| type| source ---|---|--- 2025-09-03 18:09:35+00:00| seen| https://bsky.app/profile/golang.org/post/3lxxa2w5izg25 2025-09-04 02:09:19+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lxy2urp36l2b 2025-09-06 02:08:55+00:00| seen|...
CVE-2025-58642
creationtimestamp| type| source ---|---|--- 2025-09-03 17:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx5z3f4nx2j 2025-09-03 20:30:29+00:00| seen| https://gist.github.com/Darkcrai86/b270f0a3b53e6d39444f931752c48b15...
CVE-2025-9838
creationtimestamp| type| source ---|---|--- 2025-09-03 06:22:17+00:00| seen| https://gist.github.com/Darkcrai86/4596262b8bdea5d2a8d315d3fd66e8e5...
CVE-2025-9491
creationtimestamp| type| source ---|---|--- 2025-09-03 03:00:12+00:00| published-proof-of-concept| Telegram/BYReJHPPSyLhmcKeWSqbALuDJ9yVdorBmcZtQNEL87mls 2025-09-05 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ly4knsjlmh2w 2025-10-31 12:03:46+00:00| seen|...