CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-48071

creationtimestamp| type| source ---|---|--- 2025-07-31 23:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvcdeoqrfy2k 2025-08-13 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-834/...

CVE-2025-45768

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR...

CVE-2025-8426 Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

CVE-2025-8426

CVE-2025-8426 concerns Marvell QConvergeConsole. The issue is in the compressConfigFiles method where user-supplied paths are not properly validated before file operations, enabling a directory-traversal attack that can disclose sensitive information and trigger a denial-of-service condition. Exp...

CVE-2025-50340

creationtimestamp| type| source ---|---|--- 2025-07-31 15:00:06+00:00| seen| Telegram/cWtiHx103QDqzsPEFibXmjg0nuYdbQyVZSdVVVBXQwi1FA 2025-08-06 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oauhqc2h...

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

CVE-2025-41688

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

CVE-2025-8286

creationtimestamp| type| source ---|---|--- 2025-07-31 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01 2025-07-31 20:05:09+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvbwobpueh2i 2025-07-31 23:12:23+00:00| seen|...

CVE-2025-46359

creationtimestamp| type| source ---|---|--- 2025-07-31 09:01:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvarl7ddfa2e 2025-07-31 11:15:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvaz3gzncq2p 2026-08-25 11:00:03+00:00| published-proof-of-concept|...

CVE-2023-21398

creationtimestamp| type| source ---|---|--- 2025-07-31 08:46:10+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lvaqov2x4f72...

CVE-2025-49083

creationtimestamp| type| source ---|---|--- 2025-07-31 00:36:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lv7vbzcsw5s2...

CVE-2024-42644

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0...

CVE-2025-29556

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...

PT-2025-31510 · Undefined · Undefined

CVE-2024-11478 Rejected reason https://t.co/tQc4QcG4Ui Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...

CVE-2025-51384

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecnetasp function via the remotip parameter...

CVE-2025-54589

creationtimestamp| type| source ---|---|--- 2025-07-30 22:10:26+00:00| published-proof-of-concept| https://github.com/9001/copyparty/security/advisories/GHSA-8mx2-rjh8-q3jq 2025-07-31 21:52:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46103 2025-08-01 03:00:05+00:00|...

CVE-2025-36611

creationtimestamp| type| source ---|---|--- 2025-07-30 21:02:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7jenriqr26...

CVE-2025-54423

copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5...