SUSE: Security Advisory (SUSE-SU-2025:0618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0614-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1597

creationtimestamp| type| source ---|---|--- 2025-02-23 23:22:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5105 2025-02-24 02:04:21+00:00| seen| https://t.me/cvedetector/18761 2025-02-24 02:42:11+00:00| seen|...

CVE-2025-22635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes Eventer eventer allows Reflected XSS.This issue affects Eventer: from n/a through 3.9.9...

CVE-2025-1585

creationtimestamp| type| source ---|---|--- 2025-02-23 14:21:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5093 2025-02-23 16:27:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liuatiiv3t2k 2025-02-23 17:38:06+00:00| seen|...

CVE-2025-21704

creationtimestamp| type| source ---|---|--- 2025-02-22 10:26:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5019 2025-02-22 11:09:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114047226500494320 2025-02-22 11:52:24+00:00| seen|...

Vyper's sqrt doesn't define rounding behavior

Vyper's sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. the fix is tracked in https://github.com/vyperlang/vyper/pull/4486 Vulnerability Detai...

GHSA-99R5-84GR-59F6 Leantime has Host Header Injection Vulnerability

Summary A host header injection vulnerability has been identified in the user details viewing functionality of the system. This vulnerability allows an attacker to manipulate the host header in HTTP requests, thereby gaining unauthorized access to view details of other users...

Leantime has Host Header Injection Vulnerability

Summary A host header injection vulnerability has been identified in the user details viewing functionality of the system. This vulnerability allows an attacker to manipulate the host header in HTTP requests, thereby gaining unauthorized access to view details of other users...

CVE-2025-25507

There is a RCE vulnerability in Tenda AC6 15.03.05.16multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution...

CVE-2025-1543

creationtimestamp| type| source ---|---|--- 2025-02-21 16:18:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4910 2025-02-21 19:46:56+00:00| seen| https://t.me/cvedetector/18681 2025-02-21 19:47:15+00:00| seen|...

CVE-2025-1489

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4879 2025-02-21 15:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhjfi32s 2025-02-21 15:35:58+00:00| seen| https://t.me/cvedetector/18654 2025-08-25...

SUSE CVE-2024-21199

unknown...

SUSE CVE-2025-21494

unknown...

SUSE CVE-2025-21503

unknown...

TOTOLINK X5000R security vulnerabilities

The TOTOLINK X5000R is a router product from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that originates from the apcliwpsgenpincode function, no details of the vulnerability are provided at this time...

PT-2025-7643

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned, use: Software affected versions not specified Description A host header injection issue has been identified in the user details viewing functionality, allowing an attacker to manipulate the host head...

CVE-2025-26305

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:24+00:00| seen| https://t.me/cvedetector/18559 2025-02-21 21:22:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4984 2025-02-21 23:48:51+00:00| seen|...

CVE-2025-26307

A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-20059

creationtimestamp| type| source ---|---|--- 2025-02-20 15:01:19+00:00| seen| https://bsky.app/profile/darkwebinformer.bsky.social/post/3limkmpd4qs2j 2025-02-20 15:01:54+00:00| seen| https://t.me/DarkWebInformerNews/1000 2025-02-20 16:01:08+00:00| published-proof-of-concept|...