CVE-2025-5921

creationtimestamp| type| source ---|---|--- 2025-08-01 08:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdbub43ca2d...

CVE-2025-43191

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-45767

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication...

CVE-2025-52361

The AK-Nord USB-Server-LXL firmware (versions up to v0.0.16 Build 2023-03-13 ) contains a local privilege escalation vulnerability due to insecure permissions on the /etc/init.d/lighttpd script. A locally authenticated user with low privileges (such as the "admin" user) can modify this script bec...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

PT-2025-31610 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The Apache HTTP Server is susceptible to a Cross-Site Request Forgery issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2025-48071

creationtimestamp| type| source ---|---|--- 2025-07-31 23:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvcdeoqrfy2k 2025-08-13 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-834/...

CVE-2025-45768

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR...

CVE-2025-8426 Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

CVE-2025-8426

CVE-2025-8426 concerns Marvell QConvergeConsole. The issue is in the compressConfigFiles method where user-supplied paths are not properly validated before file operations, enabling a directory-traversal attack that can disclose sensitive information and trigger a denial-of-service condition. Exp...

CVE-2025-50340

creationtimestamp| type| source ---|---|--- 2025-07-31 15:00:06+00:00| seen| Telegram/cWtiHx103QDqzsPEFibXmjg0nuYdbQyVZSdVVVBXQwi1FA 2025-08-06 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oauhqc2h...

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

CVE-2025-41688

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

CVE-2025-8286

creationtimestamp| type| source ---|---|--- 2025-07-31 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01 2025-07-31 20:05:09+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvbwobpueh2i 2025-07-31 23:12:23+00:00| seen|...

CVE-2025-46359

creationtimestamp| type| source ---|---|--- 2025-07-31 09:01:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvarl7ddfa2e 2025-07-31 11:15:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvaz3gzncq2p 2026-08-25 11:00:03+00:00| published-proof-of-concept|...

CVE-2023-21398

creationtimestamp| type| source ---|---|--- 2025-07-31 08:46:10+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lvaqov2x4f72...

CVE-2025-49083

creationtimestamp| type| source ---|---|--- 2025-07-31 00:36:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lv7vbzcsw5s2...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...