CVE-2025-8507

creationtimestamp| type| source ---|---|--- 2025-08-03 14:13:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lviufrlwam2l...

CVE-2024-51775

creationtimestamp| type| source ---|---|--- 2025-08-03 14:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lviu4smmny2q 2025-08-03 16:13:21+00:00| seen| https://seclists.org/oss-sec/2025/q3/74 2025-08-03 18:37:47+00:00| seen|...

CVE-2025-52131

creationtimestamp| type| source ---|---|--- 2025-08-03 07:53:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvi77a7ss42q...

CVE-2025-54351

creationtimestamp| type| source ---|---|--- 2025-08-03 03:01:21+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvhoud3t3a2d 2025-08-03 03:58:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvhs2ctxku2z...

CVE-2025-54350

In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt...

CVE-2025-54349

In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...

CVE-2025-54349

CVE-2025-54349 affects iperf3 prior to version 3.19.1, caused by an off-by-one in iperf_auth.c leading to a heap-based buffer overflow. Connected advisories confirm a patch was released with iperf3-3.19.1 (and related debian/alma/linux advisories reference the fix). Affected product is iperf3; ro...

CVE-2025-23279

NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering...

CVE-2025-54589

Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at /?ru, users can filter the results using an input field at the top. This field appends a filter parameter to the URL, which reflects its value directly into a...

CVE-2025-31229

creationtimestamp| type| source ---|---|--- 2025-08-02 19:40:01+00:00| seen| https://bsky.app/profile/pocarosa2381.xiaoyaoniang.com/post/3lvgw72xc7c2o...

CVE-2025-8391

creationtimestamp| type| source ---|---|--- 2025-08-02 13:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvg7zj3t3d2k...

CVE-2025-6754

creationtimestamp| type| source ---|---|--- 2025-08-02 10:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfws2qki22e...

CVE-2025-6078

creationtimestamp| type| source ---|---|--- 2025-08-02 05:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfhfr4l2m2l...

CVE-2025-8146

CVE-2025-8146 : Qi Addons For Elementor (WordPress) is vulnerable to Stored Cross-Site Scripting via the TypeOut Text widget in all versions up to and including 1.9.2, due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at cont...

CVE-2025-54386

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../...

CVE-2025-54132

CVE-2025-54132 affects Cursor’s Mermaid-based diagram tool prior to version 1.3. An attacker can trigger prompt injections to cause Mermaid-rendered images to fetch data to a remote attacker-controlled server, enabling exfiltration of sensitive information. The issue is fixed in version 1.3; upgr...

CVE-2025-54424 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate...

CVE-2013-10057

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...

CVE-2025-53012

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsin...

CVE-2025-54782

creationtimestamp| type| source ---|---|--- 2025-08-01 17:27:04+00:00| published-proof-of-concept| https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7 2025-08-02 01:31:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvezf6nhoo2m 2025-08-02 01:58:26+00:00| seen...