CVE-2025-55580

creationtimestamp| type| source ---|---|--- 2025-08-29 15:00:05+00:00| published-proof-of-concept| Telegram/U6l-Q4SZdPiAedvn42TqFBjKPNqGBicsG-VLuzxCP48 2025-08-31 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxpyd53f6n2b...

CVE-2025-35113

Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31...

CVE-2025-35112

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31...

CVE-2025-35112

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31...

CVE-2025-35113

Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31...

CVE-2025-35112 Agiloft XML external entity local path traversal

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31...

CVE-2025-35112 Agiloft XML external entity local path traversal

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31...

CVE-2025-35112

CVE-2025-35112 describes an XML External Entities path-traversal vulnerability in Agiloft Release 28, exploitable via any table that allows import/export. An authenticated attacker can import a template file and traverse local system files. The issue is caused by improper handling of XML entities...

CVE-2025-52035

A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 dated...

PT-2025-34818 · Agiloft · Agiloft

Name of the Vulnerable Software and Affected Versions: Agiloft versions prior to 31 Description: Agiloft Release 28 contains an XML External Entities issue in any table that allows 'import/export'. An authenticated attacker can import a template file and perform path traversal on local system...

Agiloft multiple vulnerabilities

RISK EVALUATION Agiloft is a web-based contract management platform. Multiple vulnerabilities were found in Agiloft that could allow an attacker to gain administrative access to Agiloft, execute operating system commands, or modify update packages. 2. RECOMMENDED PRACTICES These issues have been...

CVE-2024-545078

creationtimestamp| type| source ---|---|--- 2025-08-25 18:31:44+00:00| seen| MISP/71f05cce-2beb-4b80-8496-bbbabc032544...

CVE-2025-55294

creationtimestamp| type| source ---|---|--- 2025-08-20 07:31:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwsvvkqayw2p...

CVE-2025-23553

creationtimestamp| type| source ---|---|--- 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

CVE-2024-43051

creationtimestamp| type| source ---|---|--- 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:46+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3...

CVE-2025-8898

creationtimestamp| type| source ---|---|--- 2025-08-16 07:31:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwitzpx5m42g 2026-04-08 23:31:21+00:00| seen| Telegram/uDb8p1iskXO6Pq5CJ62NBhUvl5M2Dmbo-CUN4HEs8fpntc...

CVE-2025-9023

creationtimestamp| type| source ---|---|--- 2025-08-15 10:31:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwgnmmcdbx2a 2025-08-15 12:17:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwgtjey7wr2d 2025-08-15 13:32:59+00:00| seen|...

CVE-2025-45317

creationtimestamp| type| source ---|---|--- 2025-08-13 19:31:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwcku7vne52y...

CVE-2023-21357

creationtimestamp| type| source ---|---|--- 2025-08-13 14:31:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbzyvafl3p2...

BIT-LIBPHP-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure ...