Aggregator

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.15.9/6.16.0. This issue affects the function ath12k_mac_handle_beacon_miss_iter of the component P2P Interface. Such manipulation leads to uninitialized pointer. This vulnerability is listed as CVE-2025-38606. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.15.9/6.16.0. The affected element is the function ath12k_dp_tx_get_encap_type. Performing manipulation results in denial of service. This vulnerability is identified as CVE-2025-38605. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in CivicTheme Design System up to 1.11.x on Drupal. It has been declared as critical. This issue affects some unknown processing. Executing manipulation can lead to incorrect authorization. This vulnerability is tracked as CVE-2025-12082. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Reverse Proxy Header up to 1.1.1 on Drupal. Affected by this vulnerability is an unknown functionality. The manipulation results in improper validation of consistency within input. This vulnerability was named CVE-2025-10929. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in JSON Field up to 1.4 on Drupal. The affected element is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-10926. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Plausible Tracking up to 1.0.1 on Drupal. The impacted element is an unknown function. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2025-10927. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Access Code up to 2.0.4 on Drupal. It has been classified as problematic. This vulnerability affects unknown code. Performing manipulation results in improper restriction of excessive authentication attempts. This vulnerability is identified as CVE-2025-10928. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability described as problematic has been identified in Currency up to 3.4.x on Drupal. Affected is an unknown function. Executing manipulation can lead to cross-site request forgery. This vulnerability appears as CVE-2025-10930. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

China-linked cyber-espionage actors tracked as 'Bronze Butler' (Tick) exploited a Motex Lanscope Endpoint Manager vulnerability as a zero-day to deploy an updated version of their Gokcpdoor malware. [...]

A China-linked APT group UNC6384 exploits a Windows zero-day in an active cyber espionage targeting European diplomats. Arctic Wolf Labs researchers uncovered a cyber espionage campaign by China-linked APT UNC6384 targeting diplomatic entities in Hungary, Belgium, and other EU nations. UNC6384 is a China-nexus actor recently detailed by Google TAG, has expanded from targeting Southeast […]

X Chat обещает приватность, которой никогда не было у конкурентов.

The Australian Signals Directorate (ASD) has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previously undocumented implant known as BADCANDY. The activity, per the intelligence agency, involves the exploitation of CVE-2023-20198 (CVSS score: 10.0), a critical vulnerability that allows a remote, unauthenticated attacker to create an

Anthropic признала процессуальную ошибку только после публичного скандала с отчётом безопасности.

新冠疫情爆发后，各国采取了封锁、社交距离和旅行限制等公共卫生措施，旨在通过避免密切接触减少病毒传播。根据发表在《科学》期刊上的一项研究，人类并非是唯一一种改变空间环境以降低疫情风险的动物。黑花园蚁（Lasius niger）会改变巢穴结构减缓疫情爆发——相当于昆虫版的社交隔离。研究人员首先观察了两组蚂蚁挖掘巢穴，然后让其中一组暴露在绿僵菌（Metarhizium brunneum）孢子中，利用 micro-CT 扫描巢穴在之后数天内的结构变化。研究团队发现，暴露在绿僵菌孢子的蚂蚁巢穴入口平均距离增加了约 6 毫米，在偏僻地方建造了更长更曲折的巢室，蚂蚁甚至挖掘了多条隧道，可能是为了避免接触而设置的替代运输路线。

A vulnerability has been found in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0 and classified as critical. This vulnerability affects the function rtl8187_stop. Performing manipulation results in null pointer dereference. This vulnerability is identified as CVE-2025-38604. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

This appears to be a false positive. Please validate the mentioned sources and consider excluding this entry altogether.

A vulnerability was found in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0. It has been classified as problematic. Impacted is the function alloc_ordered_workqueue of the component iwlwifi. The manipulation leads to unchecked return value. This vulnerability is listed as CVE-2025-38602. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability described as critical has been identified in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0. Affected by this issue is the function ath11k_hal_dump_srng_stats. The manipulation results in denial of service. This vulnerability is known as CVE-2025-38601. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.15.9/6.16.0. Affected is the function mt7996_tx of the component wifi. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2025-38599. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.16.0. Affected by this vulnerability is the function mt7925_mcu_hw_scan of the component wifi. The manipulation of the argument ssids[] results in off-by-one. This vulnerability was named CVE-2025-38600. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.