Mattermost Confluence Plugin security vulnerabilities

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause access to subscription details...

CVE-2025-53857: Missing Authorization

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint...

CVE-2025-8815 猫宁i Morning Shiro Configuration index path traversal

A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as critical. Affected is an unknown function of the file /index of the component Shiro Configuration. The manipulation leads to path traversal. It is possible to launch the attack...

PT-2025-32475 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.6 Description: A problematic issue has been identified in Open5GS. This issue affects the gmm state exception function within the src/amf/gmm-sm.c file of the AMF component. Manipulation of this function can lead...

CVE-2025-8752 wangzhixuan spring-shiro-training add command injection

A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The...

CVE-2025-8752

The CVE-2025-8752 entry concerns the wangzhixuan spring-shiro-training project (up to commit 94812c1fd8f7fe796c931f4984ff1aa0671ab562). The vulnerability is in the /role/add code path and is due to a command injection vulnerability. It is exploitable remotely and has been publicly disclosed. The ...

CVE-2025-8752 wangzhixuan spring-shiro-training add command injection

A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The...

CVE-2025-8667

A vulnerability, which was classified as critical, was found in SkyworkAI DeepResearchAgent up to 08eb7f8eb9505d0094d75bb97ff7dacc3fa3bbf2. Affected is the function fromcode/fromdict/frommcp of the file src/tools/tools.py. The manipulation leads to os command injection. It is possible to launch t...

BinaryAudit

...

CVE-2025-6004

creationtimestamp| type| source ---|---|--- 2025-08-08 15:11:38+00:00| seen| https://bsky.app/profile/brohee.bsky.social/post/3lvvjyssdlc25 2026-08-14 16:00:22+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-15 00:00:46+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-16...

CVE-2025-8705

creationtimestamp| type| source ---|---|--- 2025-08-08 05:20:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvuixyv4gu2q...

SUSE: Security Advisory (SUSE-SU-2025:02717-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DAR-7000 Router get_ip_addr_details() Function

The vulnerability of the getipaddrdetails function /view/vpn/sxhvpn/sxhvpnlic.php of the D-Link DAR-7000 router’s software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-8702

creationtimestamp| type| source ---|---|--- 2025-08-07 23:42:08+00:00| seen| https://bsky.app/profile/potato.software/post/3lvtw2pr3242x...

CVE-2023-41531

creationtimestamp| type| source ---|---|--- 2025-08-07 22:14:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtr67aqa32k 2025-11-13 19:20:33+00:00| seen| https://gist.github.com/celbahraoui-chaima/3a343f00647d901c093c90966fd91fe6...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2025-8577

A flaw was found in the Picture-in-Picture component of Google Chrome. This vulnerability allows a remote attacker who convinces a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...

CVE-2025-8576

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2025-8580

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-8582

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...