CVE-2015-5600

creationtimestamp| type| source ---|---|--- 2025-07-24 20:25:13+00:00| seen| https://gist.github.com/eplord/cfdc27a611599ce7d93d1ba56da3d7e0 2025-11-11 15:00:08+00:00| published-proof-of-concept| Telegram/lbg3qz8wK-Srr-k6BvW0hDYmtpTKwvGGzCPXHWNgNmGS9PQ 2026-01-25 15:30:55+00:00| seen|...

CVE-2025-8043

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Focus incorrectly truncated URLs towards the beginning instead of around the origin...

SUSE: Security Advisory (SUSE-SU-2025:02447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-30730

Name of the Vulnerable Software and Affected Versions Node-SAML affected versions not specified Description Node-SAML is susceptible to a flaw where it loads the assertion from the unsigned original response document, differing from the signature verification process. This allows modification of...

PT-2025-30675 · Ibm · Ibm Mq Operator +1

Name of the Vulnerable Software and Affected Versions: IBM MQ Operator versions 2.0.0 through 2.0.29 IBM MQ Operator CD versions 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0 IBM MQ Operator SC2 versions 3.2.0 through 3.2.13 Description: Improper certificate validati...

SUSE SLED15: python3-salt / python3-salt-testsuite / salt / salt-api / etc (SUSE-SU-2025:02501-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02501-1 advisory. - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 -...

rsfiles!

Extension: RSFiles! Version: Old 1.17.7 / New 1.17.8 Update details: Versions affected 1.16.3 through 1.17.7. Allows unauthenticated remote attackers to deny access to service via search component. Fixed in 1.17.8 Update URL:...

CVE-2025-4700

creationtimestamp| type| source ---|---|--- 2025-07-23 20:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunugwa5aj2i 2025-07-25 03:38:54+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4r6l6lc2g...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.15.55 packages and security update

Red Hat OpenShift Container Platform release 4.15.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2024-12310

creationtimestamp| type| source ---|---|--- 2025-07-23 15:16:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunct6brw32o 2025-09-09 20:56:41+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service when connecting to a z/OS database. (CVE-2025-1000)

Summary IBM® Db2® is vulnerable to a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting. Vulnerability Details CVEID:CVE-2025-1000 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated use...

Security Bulletin: IBM® Db2® federated server is vulnerable to a denial of service due to insufficient release of allocated memory resources. (CVE-2025-0915)

Summary IBM® Db2® is vulnerable to a denial of service due to insufficient release of allocated memory resources. Vulnerability Details CVEID:CVE-2025-0915 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server under specific configurations could allow an authenticated user ...

Security Bulletin: IBM® Db2® is vulnerable to denial of service as the server may crash under certain conditions with a specially crafted query on columnar tables (CVE-2024-49350)

Summary IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query on columnar tables. Vulnerability Details CVEID:CVE-2024-49350 DESCRIPTION: IBM Db2 for Linux, UNIX and...

CVE-2025-27930

Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor...

CVE-2025-43484

creationtimestamp| type| source ---|---|--- 2025-07-23 04:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lum7ndemkx27...

CVE-2025-43489

creationtimestamp| type| source ---|---|--- 2025-07-23 04:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lum73g7h632h...

CVE-2025-8011

creationtimestamp| type| source ---|---|--- 2025-07-23 01:21:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulu6bzbzu2i 2025-07-23 07:43:00+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3lumjhslkic23 2025-07-24 12:58:37+00:00| seen|...

Oracle Linux 7 : apache-commons-vfs (ELSA-2025-10548)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10548 advisory. 2.0-11.0.1 - Simplify UriParser Orabug: 38161936CVE-2025-27553 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora: Security Advisory (FEDORA-2025-ef6e0fa117)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Ultimate Push Notifications Missing Authorization Vulnerability

WordPress Ultimate Push Notifications is a plugin that is mainly used to implement real-time push functionality in WordPress websites, supporting sending desktop and mobile device notifications to users. WordPress Ultimate Push Notifications suffers from a lack of authorization vulnerability, no...