Aggregator

CVE-2025-68294 | Linux Kernel up to 6.17.10 io_uring buffer overflow (Nessus ID 278918)

Vuldb Updates
1 day 2 hours ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.17.10. This affects an unknown part of the component io_uring. Such manipulation leads to buffer overflow. This vulnerability is documented as CVE-2025-68294. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.
vuldb.com

Exploited SonicWall zero-day patched (CVE-2025-40602)

Help Net Security
1 day 2 hours ago

SonicWall has patched a local privilege escalation vulnerability (CVE-2025-40602) affecting its Secure Mobile Access (SMA) 1000 appliances and is urging customers to apply the provided hotfix, as the flaw has been exploited by attackers. “This vulnerability was reported to be leveraged in combination with CVE-2025-23006 to achieve unauthenticated remote code execution with root privileges,” the company said. About CVE-2025-40602 SonicWall Secure Mobile Access (SMA) 1000 appliances/gateways are used by large, distributed enterprises to allow employees … More →

The post Exploited SonicWall zero-day patched (CVE-2025-40602) appeared first on Help Net Security.

Zeljka Zorz

CVE-2025-66563 | monkeytypegame monkeytype up to 25.49.0 quote.text/quote.source cross site scripting (GHSA-mfjh-9552-8g27)

Vuldb Updates
1 day 3 hours ago
A vulnerability described as problematic has been identified in monkeytypegame monkeytype up to 25.49.0. Affected is an unknown function. Such manipulation of the argument quote.text/quote.source leads to cross site scripting. This vulnerability is listed as CVE-2025-66563. The attack may be performed from remote. There is no available exploit. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2023-53891 | blackcat-cms Blackcat CMS 1.4 Page Modification Interface cross site scripting (Exploit 51604)

Vuldb Updates
1 day 3 hours ago
A vulnerability has been found in blackcat-cms Blackcat CMS 1.4 and classified as problematic. This issue affects some unknown processing of the component Page Modification Interface. Performing manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2023-53891. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-67874 | ChurchCRM up to 6.4.x observable response discrepancy (GHSA-p98h-5xcj-5c6x)

Vuldb Updates
1 day 3 hours ago
A vulnerability, which was classified as problematic, has been found in ChurchCRM up to 6.4.x. Affected by this vulnerability is an unknown functionality. This manipulation causes observable response discrepancy. The identification of this vulnerability is CVE-2025-67874. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

Managed ad