CVE-2025-8957

creationtimestamp| type| source ---|---|--- 2025-08-14 22:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwfdyzj2bv2d...

CVE-2025-537166

creationtimestamp| type| source ---|---|--- 2025-08-13 05:25:08+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0251...

CVE-2025-20109

creationtimestamp| type| source ---|---|--- 2025-08-12 20:02:47+00:00| seen| Telegram/qSfnk1kVJLD97AyGiJGG0hucUnvnASBqpJf-0ax2rmB5oA...

CVE-2025-49564

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-8828

creationtimestamp| type| source ---|---|--- 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

CVE-2025-5095 Burk Technology ARC Solo Missing Authentication for Critical Function

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

CVE-2025-8731 TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials

A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-47807

A flaw was found in gstreamer1-plugins-base. The subparse plugin's subripunescapeformatting function contains a NULL pointer dereference when parsing a subtitle file, which can lead to a program crash. This vulnerability allows a local attacker to provide a specially crafted subtitle file, causin...

CVE-2025-46388

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2024-58256

creationtimestamp| type| source ---|---|--- 2025-08-08 07:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvureit5xd2p...

CVE-2025-21474

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-27066

Transient DOS while processing an ANQP message...

CVE-2025-21458

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously...

CVE-2025-54630

:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54631

Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-45766

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is...

CVE-2025-54368 uv is vulnerable to ZIP payload obfuscation through parsing differentials

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2025-47807

In GStreamer through 1.26.1, the subparse plugin's subripunescapeformatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash...

CVE-2024-42048

OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users to write to the installation path. In combination with the application's behavior of loading DLLs from this location, this allows for DLL hijacking and may...