CVE-2020-36908

creationtimestamp| type| source ---|---|--- 2026-01-06 16:10:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849026353201544 2026-01-06 16:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbresus3gf2g 2026-01-07 21:03:05+00:00| seen|...

CVE-2025-60262

creationtimestamp| type| source ---|---|--- 2026-01-06 16:04:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849002942753373 2026-01-06 17:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrgin6mqv2u 2026-01-06 17:57:09+00:00| seen|...

CVE-2025-68280

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

CVE-2025-20794

creationtimestamp| type| source ---|---|--- 2026-01-06 10:39:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115847721710421921 2026-01-06 20:13:05+00:00| seen| Telegram/Th7Utg6Z4ZIZZKA-EPC2QNOtDArtNoryDFgV1KwfSaAIYk 2026-01-06 22:01:11+00:00| seen|...

CVE-2026-0640

creationtimestamp| type| source ---|---|--- 2026-01-06 10:25:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115847668271357675 2026-01-06 16:04:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849002942753373 2026-01-06 16:29:01+00:00| seen|...

SUSE CVE-2025-12421

Mattermost versions 11.0.x = 11.0.2, 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email...

PT-2026-1497

Name of the Vulnerable Software and Affected Versions wolfSSH versions 1.4.21 and earlier Description The wolfSSH key exchange state machine can be manipulated, potentially leading to the exposure of the client’s password in plaintext. This manipulation could also allow an attacker to trick the...

wolfSSH 安全漏洞

wolfSSH is a small, fast, and portable SSH implementation of wolfSSL open source, including support for SCP and SFTP. A security vulnerability exists in wolfSSH 1.4.21 and earlier versions, which stems from a key exchange state machine that can be manipulated, potentially leading to the disclosur...

GHSA-6MQ8-RVHQ-8WGG

creationtimestamp| type| source ---|---|--- 2026-01-05 22:14:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844791950366444 2026-01-05 23:05:33+00:00| published-proof-of-concept| Telegram/SaQdu2HuKivKnxzQDHW0crSXnl1eIl3nAV9Cs1OYgaU4ueA 2026-01-06 03:55:16+00:00| seen|...

GHSA-PHPV-94HG-FV9G

creationtimestamp| type| source ---|---|--- 2026-01-05 21:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844736458981138 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...

GHSA-VRJC-Q2FH-6X9H

creationtimestamp| type| source ---|---|--- 2026-01-05 21:29:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844615213362323 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-24 21:30:51+00:00| seen|...

GHSA-6G8Q-HP2J-GVWV

creationtimestamp| type| source ---|---|--- 2026-01-05 20:33:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844394905204282 2026-01-08 14:01:19+00:00| seen| Telegram/MF5MbKH9Dl27A-oSLc1JrD-xlLt5sgTckbUHyznbnX30sc...

GHSA-F8CM-6447-X5H2

creationtimestamp| type| source ---|---|--- 2026-01-05 18:18:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115843866761403958 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...

XML External Entity (XXE) Injection

Overview org.apache.sis.core:sis-metadata is an Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Affected versions of this package are...

CVE-2025-68280

CVE-2025-68280 affects Apache SIS versions 0.4–1.5. The issue is an improper restriction of XML External Entity (XXE) references, allowing an XML document to disclose content from the server’s local filesystem when parsed by SIS. Impacted services include reading GeoTIFFs with the GEO_METADATA ta...

CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

PT-2026-1285

Name of the Vulnerable Software and Affected Versions Apache SIS versions 0.4 through 1.5 Description An improper restriction of XML external entity reference issue exists in Apache SIS. An attacker can craft XML files that, when parsed by Apache SIS, reveal the content of local files on the...

CVE-2025-64125

creationtimestamp| type| source ---|---|--- 2026-01-03 02:17:44+00:00| seen| Telegram/Ebo-gkPQsU5ZVR88T6c8Czu6pposjvXlMFCvAeF1s7O9Ic 2026-01-03 02:27:00+00:00| seen| Telegram/3Ub9vt3to4CKUoes7wkyrVeu7meuRAQ-g3v994OIXZqD0w 2026-01-03 02:36:13+00:00| seen|...

CVE-2025-64120

creationtimestamp| type| source ---|---|--- 2026-01-02 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115828021584484273 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 02:26:56+00:00| seen|...