CVE-2025-54610

Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-52796

creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:56+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...

CVE-2025-53487

creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:53+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...

CVE-2025-47136

creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:19+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:52+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...

CVE-2024-45183

An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400. A lack of a JPEG length check leads to an out-of-bound write...

CVE-2025-45766

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is...

CVE-2025-45764

jsrsasign v11.1.0 was discovered to contain weak encryption. NOTE: this issue has been disputed by a third party who believes that CVE IDs can be assigned for key lengths in specific applications that use a library, and should not be assigned to the default key lengths in a library. This dispute ...

CVE-2025-54872

The CVE-2025-54872 entry concerns onion-site-template, where versions including commit 3196bd89 embed a baked-in Tor image containing secrets copied from an onion domain. This creates a risk that a website could be compromised if the baked-in image is shared or if someone gains access to the user...

CVE-2025-54801

CVE-2025-54801 affects github.com/gofiber/fiber/v2 prior to 2.52.9. The BodyParser parses form data where a very large numeric key is treated as a slice index, causing an out-of-bounds/oversized slice allocation in the decoder. Root cause: the decoder allocates a slice of length idx+1 without val...

CVE-2025-54253

creationtimestamp| type| source ---|---|--- 2025-08-05 20:41:05+00:00| seen| https://bsky.app/profile/redsiege.com/post/3lvokyza5bk2o 2025-08-06 01:08:56+00:00| seen| https://bsky.app/profile/tamosan.bsky.social/post/3lvozy2v2rt2u 2025-08-06 07:47:00+00:00| seen| https://t.me/HackerNewscyber/2294...

CVE-2025-22115

creationtimestamp| type| source ---|---|--- 2025-08-05 20:37:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvoktgxhhs2f 2025-08-06 18:47:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvqv4serzs2v...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2012-10024

CVE-2012-10024 affects XBMC 11 and earlier builds up to 2012-11-04 nightly, where the embedded HTTP server is vulnerable to path traversal due to improper URI input sanitization when accessed with HTTP Basic Authentication. An authenticated attacker can request files outside the document root, po...

CVE-2025-47152

creationtimestamp| type| source ---|---|--- 2025-08-05 15:00:11+00:00| seen| https://infosec.place/objects/7c17b80f-2a42-4b10-a886-5222d3e93afc...

CVE-2025-5477954

creationtimestamp| type| source ---|---|--- 2025-08-05 14:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3lvnvpyzxws2u...

CVE-2025-23311

creationtimestamp| type| source ---|---|--- 2025-08-05 11:28:20+00:00| seen| https://poliverso.org/objects/0477a01e-4c41e1f5-06704c34bb3024e5 2025-08-06 14:05:55+00:00| seen| Telegram/pxT0QZaewBwGfMoqU9NsQjSpVQT2ILSXIFlN7ZxNu3GtCv 2025-08-07 03:01:56+00:00| seen|...

CVE-2025-23317

creationtimestamp| type| source ---|---|--- 2025-08-05 11:28:20+00:00| seen| https://poliverso.org/objects/0477a01e-4c41e1f5-06704c34bb3024e5 2025-08-06 14:05:55+00:00| seen| Telegram/pxT0QZaewBwGfMoqU9NsQjSpVQT2ILSXIFlN7ZxNu3GtCv 2025-08-07 01:31:44+00:00| seen|...

CVE-2025-7768

creationtimestamp| type| source ---|---|--- 2025-08-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02 2025-08-05 16:06:34+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvo3obrv5y2b 2025-08-07 00:00:36+00:00| seen|...

CVE-2025-54795

creationtimestamp| type| source ---|---|--- 2025-08-05 07:07:33+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lvn5kfzyyo2m 2025-08-07 11:48:51+00:00| seen| https://bsky.app/profile/warthogtk.bsky.social/post/3lvso7bhnab2z 2026-01-03 21:00:04+00:00| published-proof-of-concept|...

CVE-2025-54868 LibreChat exposes arbitrary chats through Meilisearch engine

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...