CVE-2025-51384

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecnetasp function via the remotip parameter...

CVE-2025-29556

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...

PT-2025-31510 · Undefined · Undefined

CVE-2024-11478 Rejected reason https://t.co/tQc4QcG4Ui Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...

CVE-2025-54589

creationtimestamp| type| source ---|---|--- 2025-07-30 22:10:26+00:00| published-proof-of-concept| https://github.com/9001/copyparty/security/advisories/GHSA-8mx2-rjh8-q3jq 2025-07-31 21:52:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46103 2025-08-01 03:00:05+00:00|...

CVE-2025-36611

creationtimestamp| type| source ---|---|--- 2025-07-30 21:02:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7jenriqr26...

CVE-2025-54423

copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5...

CVE-2025-54581

vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization header and passed to Extension::tryfrom and flows into parsettlextension where it is parsed as a TTL value. If an attacker supplies a TTL of zero...

CVE-2025-8353

creationtimestamp| type| source ---|---|--- 2025-07-30 17:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv767stkba26...

CVE-2025-25692

A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-53112

GLPI (versions 9.1.0–10.0.18) has a permission-checking weakness that can allow unauthorized removal of specific resources. The root cause is lack of permission checks on certain deletion actions. The issue is fixed in version 10.0.19. Mitigation is to upgrade to 10.0.19 or apply vendor-provided ...

CVE-2025-54572

The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the messagemaxbytesize setting configured. The vulnerability occurs because the SAML response is validated for Base64...

CVE-2025-52567 GLPI has overly permissive URL verification

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 0.84 through 10.0.18, usage of RSS feeds or external calendars when planning is subject to SSRF exploit. The previous security patches provided...

CVE-2025-45767

creationtimestamp| type| source ---|---|--- 2025-07-30 01:49:33+00:00| seen| https://gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91d...

CVE-2025-31229

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver...

CVE-2025-53022

TrustedFirmware-M aka Trusted Firmware for M profile Arm CPUs before 2.1.3 and 2.2.x before 2.2.1 lacks length validation during a firmware upgrade. While processing a new image, the Firmware Upgrade FWU module does not validate the length field of the Type-Length-Value TLV structure for dependen...

CVE-2025-24224

Several Apple operating systems, including iOS , iPadOS , macOS , tvOS , watchOS , and visionOS , are affected by a vulnerability caused by insufficient checking of unusual or exceptional states . A remote attacker can exploit this flaw to trigger service failures or cause unexpected system termi...

CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2025-43253

This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to launch arbitrary binaries on a trusted device...

CVE-2025-43252

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive user data when resolving symlinks...

CVE-2025-43259

A security vulnerability in Apple macOS allows an attacker with physical access to a locked device to view sensitive user information . This issue was addressed through improved redaction of sensitive information. The vulnerability is fixed in the following versions: macOS Sequoia 15.6 , macOS So...