CVE ID : CVE-2025-7855
Published : July 19, 2025, 9:15 p.m. | 2 hours, 29 minutes ago
Description : A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-7854
Published : July 19, 2025, 9:15 p.m. | 2 hours, 29 minutes ago
Description : A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-7856
Published : July 19, 2025, 10:15 p.m. | 1 hour, 38 minutes ago
Description : A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pass-details.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 3.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-7857
Published : July 19, 2025, 11:15 p.m. | 38 minutes ago
Description : A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file bwdates-passreports-details.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 3.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
Reminduck is a simple reminder app made to be quick and easy. Reminduck focuses on simple or recurrent reminders The…
DomainMOD is a self-hosted open source application used to manage your domains and other Internet assets in a central location…
Mind mapping software offers an excellent way of capturing your thoughts in a structured way, brainstorming new ideas. The post…
Help gamers improve and share their knowledge. The post Stratbook – strategies, tips, and tricks appeared first on LinuxLinks. Source:…
SPFtoolbox is a JavaScript and PHP app to look up DNS records such as SPF, MX, Whois, and more. The…
Il 18 luglio 2025, Intel ha annunciato la decisione di terminare il supporto per la sua distribuzione GNU/Linux ottimizzata per…
v02enc is a password-based encryption application that supports several recipients and has the option to update an encrypted file. The…
Il repository software AUR (Arch User Repository) di Arch Linux è molto popolare per ottenere pacchetti software non presenti nella…
Lute (Learning Using Texts) v3, a Python/Flask tool for learning foreign languages through reading. It’s a standalone web application The…
Real soon now, OpenAI will be shipping its initial AI-first web browser. Here’s what we know so far about it…
CVE ID : CVE-2025-27209
Published : July 18, 2025, 11:15 p.m. | 1 hour, 40 minutes ago
Description : The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who can control the strings to be hashed can generate many hash collisions – an attacker can generate collisions even without knowing the hash-seed.
* This vulnerability affects Node.js v24.x users.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-27210
Published : July 18, 2025, 11:15 p.m. | 1 hour, 40 minutes ago
Description : An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.
This vulnerability affects Windows users of `path.join` API.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-7394
Published : July 18, 2025, 11:15 p.m. | 1 hour, 40 minutes ago
Description : In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_bytes() after fork() is called. This can lead to weak or predictable random numbers generated in applications that are both using RAND_bytes() and doing fork() operations. This only affects applications explicitly calling RAND_bytes() after fork() and does not affect any internal TLS operations. Although RAND_bytes() documentation in OpenSSL calls out not being safe for use with fork() without first calling RAND_poll(), an additional code change was also made in wolfSSL to make RAND_bytes() behave similar to OpenSSL after a fork() call without calling RAND_poll(). Now the Hash-DRBG used gets reseeded after detecting running in a new process. If making use of RAND_bytes() and calling fork() we recommend updating to the latest version of wolfSSL. Thanks to Per Allansson from Appgate for the report.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-7395
Published : July 18, 2025, 11:15 p.m. | 1 hour, 40 minutes ago
Description : A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL
client failing to properly verify the server certificate’s domain name,
allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
CVE ID : CVE-2025-7396
Published : July 18, 2025, 11:15 p.m. | 1 hour, 40 minutes ago
Description : In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519 feature. While the side-channel attack on extracting a private key would be very difficult to execute in practice, enabling blinding provides an additional layer of protection for devices that may be more susceptible to physical access or side-channel observation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services
Jul 18, 2025Ravie LakshmananCloud Security / AI Security
Cybersecurity researchers have disclosed a critical container escape vulnerability in the NVIDIA Container Toolkit that could pose a severe t …
Read more
Published Date:
Jul 18, 2025 (13 hours, 54 minutes ago)
Vulnerabilities has been mentioned in this article.
CVE-2025-23266
CVE-2025-3648
CVE-2025-6554
CVE-2025-23359
CVE-2024-0132