CVE-2025-29631

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 is vulnerable to command injection through vulnerable methods that do not sanitize input before passing content to the operating system for execution. The vulnerability m...

CVE-2025-53940

CVE-2025-53940 affects Quiet, an open-source p2p chat alternative. Vulnerable in Quiet 6.1.0-alpha.4 and earlier due to an insecure, non-constant-time token verification comparison in the backend/frontend API, enabling a timing attack to guess the token character by character. The issue is resolv...

GHSA-RM8P-CX58-HCVX

creationtimestamp| type| source ---|---|--- 2025-07-24 12:00:52+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupidus46d2k 2025-07-25 12:00:52+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3luryssiohm2k...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a Denial of Service and Uncontrolled Resource Consumption due to Multer and brace-expansion( CVE-2025-48997,CVE-2025-5889 )

Summary IBM App Connect Enterprise runtime and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to a Denial of Service and Uncontrolled Resource Consumption due to Multer and brace-expansion. Vulnerability Details CVEID:CVE-2025-48997 DESCRIPTION: Multer is a node....

TP-Link Archer C1200 vulnerable to clickjacking

Overview Archer C1200 provided by TP-Link Systems Inc. contains the following vulnerability. Clickjacking CWE-1021 - CVE-2025-6983 Daimon Kawashima reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user...

CVE-2025-47281

creationtimestamp| type| source ---|---|--- 2025-07-24 01:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luodmntkko27...

The vulnerability of the Strategic Planner Starter App component in the Oracle Application Express development environment allows a hacker to gain full control over the application.

The vulnerability of the Strategic Planner Starter App component in the Oracle Application Express development environment is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

📄 Computer Mouse: Remote Control 1.1.6 Remote Code Execution

Computer Mouse: Remote Control version 1.1.6 for macOS is vulnerable to unauthenticated remote code execution via TCP port 9999. An attacker on the same network can inject simulated keyboard input, allowing arbitrary command execution without user interaction or authentication. Exploit Title:...

Malicious code in app-wheelify (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6275 Malicious code in app-wheelify (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-7940

A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper export of android...

CVE-2025-36116

creationtimestamp| type| source ---|---|--- 2025-07-23 19:09:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunpsq4b7s2h 2025-09-09 20:56:41+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-30749

creationtimestamp| type| source ---|---|--- 2025-07-23 19:08:39+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lunprrecq223 2025-07-25 19:35:25+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luss7ib4t227 2025-09-16 16:21:03+00:00| seen|...

CVE-2025-36117

creationtimestamp| type| source ---|---|--- 2025-07-23 18:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunofu56js2w...

CVE-2025-54297

creationtimestamp| type| source ---|---|--- 2025-07-23 15:01:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunbycjboq2d...

WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Blappsta Mobile App Plugin Your native, mobile iPhone App and Android App versions = 0.8.8.8...

CVE-2025-54446

creationtimestamp| type| source ---|---|--- 2025-07-23 07:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumk7ck4ua2h 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-662/...

CVE-2025-54453

creationtimestamp| type| source ---|---|--- 2025-07-23 07:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhu3hqsq2d 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-669/...

CVE-2025-54455

creationtimestamp| type| source ---|---|--- 2025-07-23 07:06:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhg4gr762w 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-671/...

CVE-2025-54448

creationtimestamp| type| source ---|---|--- 2025-07-23 07:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhd4ox4323 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-664/...