GHSA-R2FC-CCR8-96C4 Next.js has a Cache poisoning vulnerability due to omission of the Vary header

Summary A cache poisoning issue in Next.js App Router =15.3.0 and 15.3.3 may have allowed RSC payloads to be cached and served in place of HTML, under specific conditions involving middleware and redirects. This issue has been fixed in Next.js 15.3.3. Users on affected versions should upgrade...

CVE-2024-6381

creationtimestamp| type| source ---|---|--- 2025-07-03 20:21:05+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lt3kivc6hs22...

CVE-2025-53502

creationtimestamp| type| source ---|---|--- 2025-07-03 19:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3htrhkzq2a...

CVE-2025-6926

creationtimestamp| type| source ---|---|--- 2025-07-03 19:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3hbujxfa2p...

CVE-2025-53500

creationtimestamp| type| source ---|---|--- 2025-07-03 19:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3h26xnkv2p...

CVE-2025-45938

creationtimestamp| type| source ---|---|--- 2025-07-03 19:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3gniw6po2l 2025-08-06 13:54:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:22+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

Trump Officials Want to Prosecute Over the ICEBlock App. Lawyers Say That’s Unconstitutional

The platform, which allows users to anonymously share the locations of ICE agents, is currently the third-most-downloaded iPhone app...

CVE-2025-53369

creationtimestamp| type| source ---|---|--- 2025-07-03 17:32:40+00:00| published-proof-of-concept| https://github.com/StarCitizenTools/mediawiki-extensions-ShortDescription/security/advisories/GHSA-p85q-mww9-gwqf 2025-07-03 23:18:41+00:00| seen|...

CVE-2025-53368

creationtimestamp| type| source ---|---|--- 2025-07-03 17:00:25+00:00| published-proof-of-concept| https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-rq6g-6g94-jfr4 2025-07-03 23:26:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3uuxn4x42m...

CVE-2025-2932

creationtimestamp| type| source ---|---|--- 2025-07-03 15:18:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2zmp6hme2m...

CVE-2025-3702

creationtimestamp| type| source ---|---|--- 2025-07-03 15:15:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2zfy7fdv2m...

Catwatchful “child monitoring” app exposes victims’ data

If an app markets itself as being for “child monitoring”, a customer might expect that their data and those of the person you’re monitoring is handled with the utmost care and respect. However, as we've seen many times before, stalkerware which is what monitoring software is known as apps have a...

CVE-2025-38163

creationtimestamp| type| source ---|---|--- 2025-07-03 11:40:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2ngnlihe2r...

CVE-2025-38162

creationtimestamp| type| source ---|---|--- 2025-07-03 11:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2muqqosf2k 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-05 20:00:00+00:00| seen|...

CVE-2025-38172

creationtimestamp| type| source ---|---|--- 2025-07-03 11:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2maf6gdh2p 2025-07-03 19:28:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114790951297856879...

CVE-2025-38169

creationtimestamp| type| source ---|---|--- 2025-07-03 11:13:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2lw4sr3q2m...

CVE-2025-38167

creationtimestamp| type| source ---|---|--- 2025-07-03 11:01:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2l7kdkaa2k...

CVE-2025-5944

creationtimestamp| type| source ---|---|--- 2025-07-03 08:55:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2e7ttmg72u...

SUSE-SU-2025:02214-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2025-46701: Refactored CGI servlet to access resources via WebResources bsc1243815. - CVE-2025-48988: Limited the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656. -...

Malicious code in grafana-lokiexplore-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc39d2244f7b9883cfc8aab3dbe6a56ff2c2fc6469f5b351b1321c1670f261f Any computer that has this package installed or running should be considered...