13127 matches found
CVE-2025-68428
creationtimestamp| type| source ---|---|--- 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-06 00:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpo5ok4pf2y 2026-01-06 06:36:57+00:00| seen|...
Server-side Request Forgery (SSRF)
Overview io.spinnaker.orca:orca-clouddriver is a Spinnaker Orca Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper restrictions on user-supplied URLs when fetching data. An attacker can access internal resources, extract sensitive authentication data...
RHSA-2025:7624 Red Hat Security Advisory: Satellite 6 Client Bug Fix Update
Bulletin has no description...
CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6
CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6. A patched version of the package is available...
CVE-2025-53524 Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write
Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to execute arbitrary code...
CVE-2025-53524: Out-of-bounds Write
Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to execute arbitrary code...
Mozilla Thunderbird < 140.6
The version of Thunderbird installed on the remote Windows host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-96 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR 140.6,...
CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6
CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...
CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6
CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...
FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6
The 30-year-old Virginia resident evaded capture for years after authorities discovered pipe bombs planted near buildings in Washington, DC, the day before the January 6, 2021, Capitol attack...
CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6
CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6. A patched version of the package is available...
AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
AZL-71077 CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6
Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...
CVE-2024-25260 affecting package elfutils for versions less than 0.189-6
CVE-2024-25260 affecting package elfutils for versions less than 0.189-6. A patched version of the package is available...
AZL-70331 CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
CVE-2025-46368
Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
EUVD-2025-140388
Malicious code in lia-6 npm...
EUVD-2025-141488
Malicious code in hokage-6 npm...
Malicious code in hokage-6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627f0a66556cfa67adfe4d471eb691402ab7964941138852313cb92a0381c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...