55885 matches found
Fedora: Security Advisory (FEDORA-2025-465f43da19)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress YANewsflash plugin <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin YANewsflash versions = 1.0.3...
CVE-2025-51464
creationtimestamp| type| source ---|---|--- 2025-07-22 21:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulhp4a2xh2j...
CVE-2025-8044
Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141 and Thunderbird 141...
CVE-2025-8035 Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...
Security Bulletin: IBM Integration Designer is vulnerable to denial of service (CVE-2025-48976, CVE-2025-48924)
Summary Vulnerability in Apache Commons FileUpload and Commons Lang used by IBM Integration Designer. IBM Integration Designer has addressed CVE-2025-48976 and CVE-2025-48924. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient...
MINI-W2G5-QXV9-HWRM
Bulletin has no description...
CVE-2025-51480
creationtimestamp| type| source ---|---|--- 2025-07-22 17:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukz73a5un2j 2025-09-09 20:56:42+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76 2026-02-27 21:54:39+00:00| seen|...
CVE-2025-51859
creationtimestamp| type| source ---|---|--- 2025-07-22 17:06:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukyi4jrd32b...
CVE-2025-51480
A path traversal flaw was found in the ONNX machine learning library. This flaw allows an attacker to overwrite arbitrary files in the scope of the affected program using the library. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the R...
CVE-2025-4294
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...
Exploit for Race Condition in Openbsd Openssh
๐ CVE-2023-51385 - OpenSSH ProxyCommand Injection PoC This...
CVE-2025-46116
creationtimestamp| type| source ---|---|--- 2025-07-22 01:04:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lujcqkkz2x2h 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...
Fedora: Security Advisory (FEDORA-2025-585ba94c06)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-30404 ยท Undefined ยท Undefined
CVE-2025-54356 Rejected reason https://t.co/wlhPkGwe6f Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...
WordPress Pixel Gallery Addons for Elementor plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Pixel Gallery Addons for Elementor versions = 1.6.7...
WordPress SureForms plugin < 1.7.2 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin SureForms versions 1.7.2...
CVE-2025-7228 INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2025-24936
creationtimestamp| type| source ---|---|--- 2025-07-21 09:24:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luho7uhyb42j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...