CVE-2025-7878

creationtimestamp| type| source ---|---|--- 2025-07-20 12:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufi5qtvn42i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

CVE-2025-7864

creationtimestamp| type| source ---|---|--- 2025-07-20 07:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luewlbjema2i...

CVE-2025-7866

creationtimestamp| type| source ---|---|--- 2025-07-20 07:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luewcd4bsa2i...

CVE-2025-7862

creationtimestamp| type| source ---|---|--- 2025-07-20 07:01:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luevqfy7js2o 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-26 2025-09-09 20:56:45+00:00| seen|...

CVE-2025-54314

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."...

CVE-2025-7857

creationtimestamp| type| source ---|---|--- 2025-07-20 03:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lueiuv5ku42t...

CVE-2025-7858

creationtimestamp| type| source ---|---|--- 2025-07-20 03:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lueicuxicd2t...

CVE-2025-54314

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."...

CVE-2025-7829

creationtimestamp| type| source ---|---|--- 2025-07-19 18:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludlkz7k6x2h...

CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

CVE-2025-6721

creationtimestamp| type| source ---|---|--- 2025-07-19 08:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lucloupwl32o...

CVE-2025-52924

creationtimestamp| type| source ---|---|--- 2025-07-19 06:15:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luccqi7tl22i...

CVE-2025-47189

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data of certain user flows, a different vulnerability than CVE-2025-54392...

CVE-2025-54313

CVE-2025-54313 refers to eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 which contain embedded malicious code用于 supply-chain compromise. The description states that installing an affected package executes a malicious install.js that launches node-gyp.dll malware on Windows. Connected IB...

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

CVE-2025-7814

creationtimestamp| type| source ---|---|--- 2025-07-18 22:45:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubjl67gzw2b...

CVE-2025-7805

creationtimestamp| type| source ---|---|--- 2025-07-18 22:36:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubj352aow2i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7395 Domain Name Validation Bypass with Apple Native Certificate Validation

A certificate verification error in wolfSSL when building with the WOLFSSLSYSCACERTS and WOLFSSLAPPLENATIVECERTVALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardles...

CVE-2025-53901

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import functions can lead to a WebAssembly guest inducing a panic in the host embedder. The specific bug is triggered by calling pathopen after calling...