MiracleLinux 9 : java-21-openjdk-21.0.6.0.7-1.el9.ML.1 (AXSA:2025-9590:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9590:02 advisory. JDK: Enhance array handling CVE-2025-21502 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

MiracleLinux 7 : ImageMagick-6.9.10.68-7.0.5.el7.AXS7 (AXSA:2025-10911:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10911:02 advisory. CVE-2025-53101: fix heap OOB write in BlobStream CVE-2025-57807: fix stack overflow through vsnprintf CVE-2025-55154: fix integer overflows in MNG...

MiracleLinux 8 : freetype-2.9.1-9.el8.ML.1 (AXSA:2025-9777:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9777:02 advisory. An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting to parse font subglyph...

MiracleLinux 8 : doxygen-1.8.14-13.el8_10 (AXSA:2025-9660:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9660:02 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block...

GHSA-R3WG-G8XV-GXVF

creationtimestamp| type| source ---|---|--- 2026-01-10 02:04:07+00:00| published-proof-of-concept| Telegram/rdcJ-eVVBzDoFwL5TR2qJvsWI6XIYotV57lHh9Pxh3U8ZQE...

CVE-2022-38814

A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...

CVE-2022-35134

Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting XSS vulnerability...

CVE-2025-38563

creationtimestamp| type| source ---|---|--- 2026-01-08 22:13:17+00:00| published-proof-of-concept| Telegram/EmV5qM2rczBRL4srCtTYo4Qe4hr9TGrLsA4GyGEHonbwa6c 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...

CVE-2026-21860

creationtimestamp| type| source ---|---|--- 2026-01-08 20:17:19+00:00| published-proof-of-concept| Telegram/1E-LOiu7aFhlYeneUtpKZhFfvn7L83rkJZzuXnHRID7uPo 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

CVE-2019-25278

creationtimestamp| type| source ---|---|--- 2026-01-08 02:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuv5adh6p2o 2026-01-08 21:03:05+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwwuuf23...

CVE-2026-21855 Tarkov Data Manager has Unauthenticated Reflected XSS

The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting XSS vulnerability in the toast notification system allows any attacker to execute arbitrary JavaScript in the context of a victim's browser session by crafting a malicious...

CVE-2026-22541

creationtimestamp| type| source ---|---|--- 2026-01-07 17:08:26+00:00| seen| Telegram/nIdLVApAZiUzynFf9OPTKkKI9f8P82y1Gw5Bt2bBWBmvGjg 2026-01-07 18:02:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbu2fsw2j32q...

CVE-2026-21879

creationtimestamp| type| source ---|---|--- 2026-01-07 07:00:13+00:00| published-proof-of-concept| Telegram/48LJPPJqXsX53ujpRO7jSchQGpl7qMWyp3pQ0WH3nr5krXU 2026-01-08 02:34:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuwzvhgjw2y...

CVE-2025-64120

creationtimestamp| type| source ---|---|--- 2026-01-02 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115828021584484273 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 02:26:56+00:00| seen|...

GHSA-2G2W-VMG7-PQ4Q

creationtimestamp| type| source ---|---|--- 2026-01-02 21:57:38+00:00| seen| Telegram/OYffpMdaBj2T2f8vD3Xr2N56biRnySAWVcO0fFYvIpjNs...

CVE-2026-0570

creationtimestamp| type| source ---|---|--- 2026-01-02 21:57:20+00:00| seen| Telegram/cyCwqrn22MLiSZIDn3i5ho6p3CpdRCTqLfMNkNEqMCDm1Ys...

CVE-2026-0569

creationtimestamp| type| source ---|---|--- 2026-01-02 21:57:20+00:00| seen| Telegram/cyCwqrn22MLiSZIDn3i5ho6p3CpdRCTqLfMNkNEqMCDm1Ys...

CVE-2025-64119

creationtimestamp| type| source ---|---|--- 2026-01-02 21:43:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbhugzidru2y 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 00:08:49+00:00| seen|...

CVE-2025-68431

creationtimestamp| type| source ---|---|--- 2026-01-02 19:59:02+00:00| seen| https://gist.github.com/EbonJaeger/fbb406a1301a4e1bf0d8825c9b084ebb 2026-01-12 09:03:25+00:00| seen| https://gist.github.com/Darkcrai86/6bc03110f87362be274c639a47307f79 2026-01-12 15:12:31+00:00| seen|...

CVE-2026-21433

creationtimestamp| type| source ---|---|--- 2026-01-02 19:51:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbho6xrbbs2u 2026-01-02 21:57:38+00:00| seen| Telegram/OYffpMdaBj2T2f8vD3Xr2N56biRnySAWVcO0fFYvIpjNs...