16628 matches found
CVE-2025-11549
creationtimestamp| type| source ---|---|--- 2025-10-09 17:52:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115345481433278700...
CVE-2025-11528
creationtimestamp| type| source ---|---|--- 2025-10-09 14:08:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115344600217579534...
CVE-2025-10239
creationtimestamp| type| source ---|---|--- 2025-10-09 14:07:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115344596566409110 2025-11-05 03:27:16+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m4u44yqvxk2g...
[SECURITY] Fedora 41 Update: mirrorlist-server-3.0.8-1.fc41
The mirrorlist-server uses the data created by MirrorManager2 https://github.com/fedora-infra/mirrormanager2 to answer client request for the "best" mirror. This implementation of the mirrorlist-server is written in Rust. The original version of the mirrorlist-server was part of the MirrorManager...
PT-2025-41474
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description Newforma Info Exchange NIX contains a flaw in the '/UserWeb/Common/MarkupServices.ashx' endpoint that allows a remote, unauthenticated attacker to force NIX to establish a...
PT-2025-41469
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions prior to 2023.1 Description Newforma Info Exchange NIX allows authenticated users to read and delete arbitrary files with 'NT AUTHORITYNetworkService' privileges through requests to the...
PT-2025-41471
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions prior to 2023.1 Description Newforma Info Exchange NIX contains a flaw in the /UserWeb/Common/UploadBlueimp.ashx API endpoint that allows an authenticated attacker to upload arbitrary files to any location...
PT-2025-41468
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions 2023.3 and 2024.1 Description Newforma Info Exchange NIX utilizes a hard-coded key for encrypting query parameters. Certain encrypted parameter values can define file paths for download, potentially...
PT-2025-41477
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description Newforma Info Exchange NIX contains a flaw in the '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' endpoint that allows a remote, unauthenticated attacker to force NIX to...
PT-2025-41476
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description Newforma Info Exchange NIX includes a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files. These SVG files can contain JavaScrip...
PT-2025-41466
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange affected versions not specified Description Newforma Info Exchange accepts serialized .NET data via the /remoteweb/remote.rem API endpoint without proper validation. This allows a remote, unauthenticated attacker to...
PT-2025-41478
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions prior to 2023.1 Description Newforma Info Exchange NIX versions prior to 2023.1, by default, permit anonymous authentication. This allows an unauthenticated attacker to exploit further issues that typically...
PT-2025-41475
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description The software contains an unauthenticated URL redirect issue via the /DownloadWeb/hyperlinkredirect.aspx API endpoint. The nhl parameter is susceptible to manipulation,...
CVE-2025-57457
creationtimestamp| type| source ---|---|--- 2025-10-08 19:06:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115340110185934801...
GHSA-GXW4-4FC5-9GR5
creationtimestamp| type| source ---|---|--- 2025-10-08 18:36:32+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115339990628749680...
CVE-2025-11488
creationtimestamp| type| source ---|---|--- 2025-10-08 18:29:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115339963560009568...
CVE-2025-4615
creationtimestamp| type| source ---|---|--- 2025-10-08 16:19:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115339452257265838 2025-10-08 19:03:24+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m2pdffgsgf2k 2025-11-11 23:03:21+00:00| seen|...
CVE-2025-11444
creationtimestamp| type| source ---|---|--- 2025-10-08 13:24:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115338765143493178...