CVE-2025-0712

CVE-2025-0712 concerns Elastic APM Server on Windows and its installer. A local attacker could exploit an uncontrolled search path element caused by insecure directory permissions during Windows installer usage, enabling local privilege escalation to SYSTEM. Affected: APM Server Windows installer...

CVE-2025-52187

GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting XSS in myprofileupdateform1.php...

CVE-2025-53022

Summary of CVE-2025-53022 (TrustedFirmware-M TLV vulnerability) TrustedFirmware-M (for Arm M profile) before 2.1.3 and 2.2.x before 2.2.1 lacks length validation in the Firmware Upgrade (FWU) module when processing TLV structures for dependent components. If the TLV length exceeds the allocated s...

CVE-2025-25692

A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-24119

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2025-4674 Unexpected command execution in untrusted VCS repositories in cmd/go

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...

CVE-2025-2537

creationtimestamp| type| source ---|---|--- 2025-07-29 19:31:51+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lv4tuti2lk2u...

CVE-2025-27514 GLPI is susceptible to Stored XSS attack through project's kanban

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

CVE-2025-6504

creationtimestamp| type| source ---|---|--- 2025-07-29 17:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4lr46e6n2z...

nodejs:20 security update

An update is available for module.nodejs-nodemon, nodejs-packaging, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

CVE-2025-53079

creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

CVE-2025-7809

creationtimestamp| type| source ---|---|--- 2025-07-29 07:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3khwfz2c2l...

CVE-2025-43209

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-673/ 2026-04-02 22:18:34+00:00| seen| Telegram/ofzxZdYhE5nMpuM1P1zGrKT9SL3EwVBffeTg8dXaW1MKkb4...

CVE-2025-50485

creationtimestamp| type| source ---|---|--- 2025-07-28 23:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2p5xykrx2d...

CVE-2025-8283

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...

CVE-2025-8194 Tarfile infinite loop during parsing with negative member offset

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives...

CVE-2025-54569

creationtimestamp| type| source ---|---|--- 2025-07-28 15:24:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzvltflsz2o...

CVE-2025-8283

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...

CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...