CVE-2024-58294

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

CVE-2024-58294 FreePBX 16 Authenticated Remote Code Execution via API Module

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

CVE-2024-58294 FreePBX 16 Authenticated Remote Code Execution via API Module

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

CVE-2025-14265

creationtimestamp| type| source ---|---|--- 2025-12-11 16:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7q24qnyno2e 2025-12-21 00:06:51+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mahgf7ev5k2b...

CVE-2023-53827

creationtimestamp| type| source ---|---|--- 2025-12-09 08:20:16+00:00| seen| https://gist.github.com/Darkcrai86/a89fc345577e499f71f068deb0e0e48d...

CVE-2025-65363

creationtimestamp| type| source ---|---|--- 2025-12-08 16:53:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115684986931258539 2025-12-08 19:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7iqav3o5q2u...

OPENSUSE-SU-2025:15801-1 libpng16-16-1.6.52-1.1 on GA media

These are all security issues fixed in the libpng16-16-1.6.52-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2025-201511

A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics AX data and access logs belonging to other Apigee customer organizations. Apigee-X was found to be vulnerable. This vulnerability was patched in version 1-16-0-apigee-3. No user action i...

PT-2025-49328

Name of the Vulnerable Software and Affected Versions Apigee-X versions prior to 1-16-0-apigee-3 Description A security issue in Apigee-X could allow an attacker to gain unauthorized read and write access to Apigee Analytics AX data and access logs belonging to other Apigee customer organizations...

GHSA-WHM3-VV55-GF27

creationtimestamp| type| source ---|---|--- 2025-12-05 16:53:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115667997784638676...

openSUSE 16 Security Update : python-cbor2 (openSUSE-SU-2025-20133-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20133-1 advisory. - CVE-2025-64076: Fixed bug in decodedefinitelongstring that causes incorrect chunk length calculation bsc1253746. Already fixed in release 5.6....

AZL-71461 CVE-2025-66293 affecting package libpng12 1.2.57-16

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing...

CVE-2025-65267

creationtimestamp| type| source ---|---|--- 2025-12-03 16:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m73vkpkoiq2k...

openSUSE 16 Security Update : libvirt (openSUSE-SU-2025-20100-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20100-1 advisory. - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots bsc1253703 - CVE-2025-12748: Fixed Denial of service in XML parsi...

openSUSE 16 Security Update : shadowsocks-v2ray-plugin, v2ray-core (openSUSE-SU-2025:20128-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20128-1 advisory. Changes in shadowsocks-v2ray-plugin: - Update version to 5.25.0 Update v2ray-core to v5.25.0 - Add update-vendor.patch, update v2ray-core to...

openSUSE 16 Security Update : curl (openSUSE-SU-2025-20090-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20090-1 advisory. - CVE-2025-9086: Fixed Out of bounds read for cookie path bsc1249191 - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes...

openSUSE 16 Security Update : kernel (openSUSE-SU-2025-20081-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20081-1 advisory. The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security...

openSUSE 16 Security Update : helmfile (openSUSE-SU-2025:20097-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20097-1 advisory. Changes in helmfile: Update to version 1.1.9: feat: update strategy for reinstall by @simbou2000 in 2019 builddeps: bump...

openSUSE 16 Security Update : alloy (openSUSE-SU-2025-20073-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20073-1 advisory. - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz bsc1248960. - CVE-2025-11065: Fixed sensitive information leak in log...

openSUSE 16 Security Update : openexr (openSUSE-SU-2025-20056-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20056-1 advisory. - CVE-2025-64181: Fixed use of uninitialized memory in function genericunpack bsc1253233 Tenable has extracted the preceding description block directly...