CVE-2025-31229

creationtimestamp| type| source ---|---|--- 2025-08-02 19:40:01+00:00| seen| https://bsky.app/profile/pocarosa2381.xiaoyaoniang.com/post/3lvgw72xc7c2o...

CVE-2025-8391

creationtimestamp| type| source ---|---|--- 2025-08-02 13:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvg7zj3t3d2k...

CVE-2025-6754

creationtimestamp| type| source ---|---|--- 2025-08-02 10:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfws2qki22e...

CVE-2025-6078

creationtimestamp| type| source ---|---|--- 2025-08-02 05:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfhfr4l2m2l...

CVE-2025-8146

CVE-2025-8146 : Qi Addons For Elementor (WordPress) is vulnerable to Stored Cross-Site Scripting via the TypeOut Text widget in all versions up to and including 1.9.2, due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at cont...

CVE-2025-54386

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../...

CVE-2025-54132

CVE-2025-54132 affects Cursor’s Mermaid-based diagram tool prior to version 1.3. An attacker can trigger prompt injections to cause Mermaid-rendered images to fetch data to a remote attacker-controlled server, enabling exfiltration of sensitive information. The issue is fixed in version 1.3; upgr...

CVE-2025-54424 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate...

CVE-2013-10057

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...

CVE-2025-53012

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsin...

CVE-2025-54782

creationtimestamp| type| source ---|---|--- 2025-08-01 17:27:04+00:00| published-proof-of-concept| https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7 2025-08-02 01:31:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvezf6nhoo2m 2025-08-02 01:58:26+00:00| seen...

CVE-2025-48074

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance...

CVE-2025-41371

creationtimestamp| type| source ---|---|--- 2025-08-01 15:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdwhmmnna2a 2025-08-02 10:31:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvfxkl755q2d...

CVE-2025-41376

creationtimestamp| type| source ---|---|--- 2025-08-01 14:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdvvomoqd2e...

CVE-2025-5921

creationtimestamp| type| source ---|---|--- 2025-08-01 08:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdbub43ca2d...

CVE-2025-43191

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-52361

CVE-2025-52361 affects AK-Nord USB-Server-LXL Firmware up to v0.0.16 Build 2023-03-13. The root cause is insecure permissions on the /etc/init.d/lighttpd script, which is executed with root privileges during system boot and on any interaction. A locally authenticated low-privilege user can modify...

CVE-2025-45767

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication...

PT-2025-31610 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The Apache HTTP Server is susceptible to a Cross-Site Request Forgery issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...