EUVD-2025-203140

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3. An app may be able to gain root privileges...

EUVD-2025-203163

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-14567

creationtimestamp| type| source ---|---|--- 2025-12-12 19:59:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sutp2vn42m 2026-08-10 17:07:51+00:00| seen| https://gist.github.com/qianqiusujiu/aac85c8baf201da8e39e56db374ad249...

CVE-2025-14062

creationtimestamp| type| source ---|---|--- 2025-12-12 08:18:51+00:00| seen| https://gist.github.com/Darkcrai86/bb923460dd68262d1f513d792af10581...

CVE-2025-14528

creationtimestamp| type| source ---|---|--- 2025-12-11 17:39:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702155519719586 2026-02-10 13:39:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-14528.yaml 2026-02-24...

CVE-2025-67739

creationtimestamp| type| source ---|---|--- 2025-12-11 17:35:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7q4dryn6d2q...

USN-7924-1 libpng1.6 vulnerabilities

It was discovered that libpng incorrectly handled memory when processing certain PNG files, which could result in an out-of-bounds memory access. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash,...

Improper Handling of Case Sensitivity

Overview org.webjars.npm:formio is an A Form and Data Management Platform for Progressive Web Applications Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via improper handling of the path parameter. An attacker can gain unauthorized access to protected A...

CVE-2025-67718: Improper Handling of Case Sensitivity

Form.io is a combined Form and API platform for Serverless applications. Versions 3.5.6 and below and 4.0.0-rc.1 through 4.4.2 contain a flaw in path handling which could allow an attacker to access protected API endpoints by sending a crafted request path. An unauthenticated or unauthorized...

CVE-2025-62102

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

SUSE CVE-2023-53788

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuningctlset tuningctlset might have buffer overrun at X if it didn't break from loop by matching A. static int tuningctlset... for i = 0; i TUNINGCTLSCOUNT; i++ A if nid ==...

CVE-2025-66645

creationtimestamp| type| source ---|---|--- 2025-12-10 00:05:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lr6xdokj2r...

Chasing Shadows: Pitfalls in LLM Security Research

Large language models LLMs are increasingly prevalent in security research. Their unique characteristics, however, introduce challenges that undermine established paradigms of reproducibility, rigor, and evaluation. Prior work has identified common pitfalls in traditional machine learning researc...

PT-2025-50913

CVE-2025-67498 - Apache HTTP Server Authentication Bypass CVE ID : CVE-2025-67498 Published : Dec. 9, 2025, 11:16 p.m. | 1 hour, 48 minutes ago Description : Rejected reason: Further research determined the issue is not a vulnerability. Severity: 0.0 | NA Visit the link for more details, such as...

EUVD-2025-202033

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

CVE-2022-50676

A potential deadlock vulnerability was found in the RDS Reliable Datagram Sockets TCP transport in the Linux kernel. In rdstcpresetcallbacks, canceldelayedworksync is called while holding the socket lock locksock. However, the worker functions rdssendxmit and rdsrecvworker may also try to acquire...

CVE-2025-62102

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

CVE-2025-62102 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

CVE-2025-62102 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

CVE-2025-62102

CVE-2025-62102 : A Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress plugin DoFollow Case by Case (versions up to 3.5.1). The vulnerability is documented across multiple sources (NVD/Red Hat/EUVD/CVE list) as CSRF in this plugin, with affected range stated as n/a through 3.5.1...