CVE-2023-21398

creationtimestamp| type| source ---|---|--- 2025-07-31 08:46:10+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lvaqov2x4f72...

CVE-2025-49083

creationtimestamp| type| source ---|---|--- 2025-07-31 00:36:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lv7vbzcsw5s2...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

CVE-2025-29556

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...

PT-2025-31510 · Undefined · Undefined

CVE-2024-11478 Rejected reason https://t.co/tQc4QcG4Ui Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...

CVE-2025-51384

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecnetasp function via the remotip parameter...

CVE-2025-54589

creationtimestamp| type| source ---|---|--- 2025-07-30 22:10:26+00:00| published-proof-of-concept| https://github.com/9001/copyparty/security/advisories/GHSA-8mx2-rjh8-q3jq 2025-07-31 21:52:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46103 2025-08-01 03:00:05+00:00|...

CVE-2025-36611

creationtimestamp| type| source ---|---|--- 2025-07-30 21:02:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7jenriqr26...

CVE-2025-54423

copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5...

CVE-2025-54581

vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization header and passed to Extension::tryfrom and flows into parsettlextension where it is parsed as a TTL value. If an attacker supplies a TTL of zero...

CVE-2025-8353

creationtimestamp| type| source ---|---|--- 2025-07-30 17:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv767stkba26...

CVE-2025-25692

A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-53112

GLPI (versions 9.1.0–10.0.18) has a permission-checking weakness that can allow unauthorized removal of specific resources. The root cause is lack of permission checks on certain deletion actions. The issue is fixed in version 10.0.19. Mitigation is to upgrade to 10.0.19 or apply vendor-provided ...

CVE-2025-54572

The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the messagemaxbytesize setting configured. The vulnerability occurs because the SAML response is validated for Base64...

CVE-2025-52567 GLPI has overly permissive URL verification

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 0.84 through 10.0.18, usage of RSS feeds or external calendars when planning is subject to SSRF exploit. The previous security patches provided...

CVE-2025-45767

creationtimestamp| type| source ---|---|--- 2025-07-30 01:49:33+00:00| seen| https://gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91d...

CVE-2025-31229

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver...

CVE-2025-53022

TrustedFirmware-M aka Trusted Firmware for M profile Arm CPUs before 2.1.3 and 2.2.x before 2.2.1 lacks length validation during a firmware upgrade. While processing a new image, the Firmware Upgrade FWU module does not validate the length field of the Type-Length-Value TLV structure for dependen...

CVE-2025-24224

CVE-2025-24224 is a remote-Trigger risk in Apple OS lineages. Affected: tvOS 18.5; iOS 18.5 and iPadOS 18.5; iPadOS 17.7.9; macOS Sequoia 15.5; watchOS 11.5; visionOS 2.5; macOS Ventura 13.7.7. Description: an issue addressed with improved checks that could allow a remote attacker to cause an une...

CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...