PT-2025-46311

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions 5723 and below Description The software is susceptible to a Stored Cross-Site Scripting XSS issue present in the Mails Deleted or Moved report. This allows for the injection of malicious scripts tha...

ZOHO ManageEngine Exchange reporter Plus 安全漏洞

ZOHO ManageEngine Exchange reporter Plus is a Web-based Microsoft Exchange reporting, auditing and monitoring software from ZOHO. A cross-site scripting vulnerability exists in ZOHO ManageEngine Exchange reporter Plus, which can be exploited by an attacker to create privileged accounts and gain...

Medium: libssh

Issue Overview: NULL Pointer Dereference vulnerability in the session ID calculation logic of the libssh library. The flaw arises from improper handling of allocation errors during cryptographic operations in the key exchange KEX phase. If a memory allocation fails, the resulting NULL pointer may...

GHSA-W832-GG5G-X44M

creationtimestamp| type| source ---|---|--- 2025-11-07 20:58:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115510417640999900 2025-11-10 09:28:07+00:00| seen| https://gist.github.com/Ochyro/47b7b222c6ca5445d317dbcf46c47d39...

GHSA-8HRF-PFWW-83V9

creationtimestamp| type| source ---|---|--- 2025-11-07 19:07:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115509981812578066...

Key Exchange without Entity Authentication

Overview Affected versions of this package are vulnerable to Key Exchange without Entity Authentication in the SFTP implementation in the wolfSSH backend. An attacker can intercept or manipulate data in transit by performing a man-in-the-middle attack. Note: This issue affects only users that bui...

CVE-2025-27917

creationtimestamp| type| source ---|---|--- 2025-11-06 17:28:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503931619214286...

CVE-2025-27916

creationtimestamp| type| source ---|---|--- 2025-11-06 17:28:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503931619214286...

CVE-2025-10885

creationtimestamp| type| source ---|---|--- 2025-11-06 17:18:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503891432816343 2025-11-06 17:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4y4bcwmpl2a 2025-11-10 05:00:00+00:00| seen|...

Ubuntu: Security Advisory (USN-7849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-56232

creationtimestamp| type| source ---|---|--- 2025-11-05 18:58:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115498622838400026 2025-11-05 21:32:43+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4vyogibg6l2 2025-11-05 22:06:24+00:00| seen|...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989113 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fcexchabtsresp fcexchreleaseep will decrease the ep's referenc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990165 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fcexchabtsresp fcexchreleaseep will decrease the ep's referenc...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : libssh vulnerability (USN-7849-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7849-1 advisory. Philippe Antoine discovered that libssh did not properly manage memory when calculating a session ...

CVE-2025-59595

creationtimestamp| type| source ---|---|--- 2025-11-04 23:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494076915539324 2025-11-04 23:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4tqhnrv6y2u 2025-11-05 00:01:54+00:00| seen|...

GHSA-6R98-6QCW-RXRW

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-VHC2-FJV4-WQCH

creationtimestamp| type| source ---|---|--- 2025-11-04 23:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115494066188195772...

GHSA-JHJX-X4CF-4VM8

creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...

CVE-2025-63294

creationtimestamp| type| source ---|---|--- 2025-11-04 16:01:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115492263455116466 2025-11-04 17:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4t3h7h5ms2u 2025-11-04 19:06:09+00:00| seen|...

CVE-2025-54863

creationtimestamp| type| source ---|---|--- 2025-11-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04 2025-11-04 16:27:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115492366334033842 2025-11-04 17:37:17+00:00| seen|...