CVE-2025-50817

creationtimestamp| type| source ---|---|--- 2025-08-14 19:23:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf2utuh3k2d 2025-09-03 23:06:32+00:00| seen| https://gist.github.com/fried/d2108a4932f3a22712dfc04598b5b8ce 2025-09-14 22:11:55+00:00| seen|...

CVE-2025-45317

creationtimestamp| type| source ---|---|--- 2025-08-13 19:31:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwcku7vne52y...

CVE-2025-8568

creationtimestamp| type| source ---|---|--- 2025-08-12 04:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6h7fdfz32z...

CVE-2025-42945

creationtimestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115013490316314202 2025-08-12 04:10:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6gwgt5mn2e...

CVE-2025-46226

creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:35+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...

CVE-2022-4979

creationtimestamp| type| source ---|---|--- 2025-07-25 16:37:35+00:00| seen| Telegram/MXVxMFIqDRtThPQ4j0phWNXWBLZUqCPfzRHJPf1nq-xVycM...

RHSA-2024:6153

creationtimestamp| type| source ---|---|--- 2025-07-05 06:11:35+00:00| seen| Telegram/WxoSytSs8Fl40qZITd-i05zi6GItywBUr-TJik2yh5HrF8...

CVE-2024-49366

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of ../../. Arbitrary files can be written to the server, which may result in loss of permissions...

CVE-2025-3440

creationtimestamp| type| source ---|---|--- 2025-05-15 16:35:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16532...

CVE-2025-24908: Path Traversal: '.../...//'

Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside of that directory. CWE-35 Description Hitachi...

CVE-2025-24907: Path Traversal: '.../...//'

Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside of that directory. CWE-35 Description Hitachi...

CVE-2025-24216

creationtimestamp| type| source ---|---|--- 2025-04-03 20:35:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10348...

CVE-2024-37917

creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10249...

CVE-2025-31582

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10220...

CVE-2025-27403

creationtimestamp| type| source ---|---|--- 2025-03-11 14:39:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7151 2025-03-11 17:37:30+00:00| seen| https://t.me/cvedetector/20086 2025-08-13 13:26:35+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2023-36542

creationtimestamp| type| source ---|---|--- 2025-02-13 19:17:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4318 2025-08-22 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4w3pyz2c...

CVE-2025-26353

A CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...

CVE-2025-26352

The CVE-2025-26352 entry documents a CWE-35 path traversal in the template deletion mechanism of Q-Free MaxTime (≤ v2.11.0). An authenticated remote attacker can delete sensitive files via crafted HTTP requests, due to the insecure handling in the deletion path. Impact is described as the ability...

CVE-2021-31515

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU bsc1232064: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete...