VulnerabilityAgent

VulnerabilityAgent 🛡️ An autonomous agent built on the BeeAI...

CVE-2021-24220

creationtimestamp| type| source ---|---|--- 2025-10-22 18:12:25+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24220.yaml 2025-10-23 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25a5lh23...

Top security researcher shares their bug bounty process

As we wrap Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to spotlight another top performing security researcher who participates in the GitHub Security Bug Bounty Program, Andr e Storfjord Kristiansen! GitHub is dedicated to maintaining the security and reliability of the...

GHSA-WP3J-XQ48-XPJW vulnerabilities

Vulnerabilities for packages: falco...

MAL-2025-48550 Malicious code in doppler-secrets-fetch-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35311

Malicious code in doppler-secrets-fetch-github-action npm...

CVE-2025-62595

creationtimestamp| type| source ---|---|--- 2025-10-21 06:58:44+00:00| published-proof-of-concept| https://github.com/koajs/koa/security/advisories/GHSA-g8mr-fgfg-5qpc...

Evaluating Large Language Models in Detecting Secrets in Android Apps

Mobile apps often embed authentication secrets, such as API keys, tokens, and client IDs, to integrate with cloud services. However, developers often hardcode these credentials into Android apps, exposing them to extraction through reverse engineering. Once compromised, adversaries can exploit...

CVE-2025-11750

creationtimestamp| type| source ---|---|--- 2025-10-20 16:29:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-11750.yaml 2025-10-22 15:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3s6ui7prz2o 2025-10-22...

CVE-2019-16072

creationtimestamp| type| source ---|---|--- 2025-10-19 23:53:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-16072.yaml 2025-10-24 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj3jgc423...

GHSA-RP2M-Q4J6-GR43

creationtimestamp| type| source ---|---|--- 2025-10-17 18:01:14+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115390812802193403...

CVE-2025-62505

creationtimestamp| type| source ---|---|--- 2025-10-17 09:26:18+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-fgx4-p8xf-qhp9...

CVE-2025-62171

creationtimestamp| type| source ---|---|--- 2025-10-17 09:03:16+00:00| published-proof-of-concept| https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm 2025-11-21 08:14:25+00:00| seen| https://gist.github.com/Darkcrai86/e83bbf1032d43d201a7187639bff59d1 2025-11-21...

GHSA-J253-W29R-9M48

creationtimestamp| type| source ---|---|--- 2025-10-17 06:21:20+00:00| seen| Telegram/W1TUsVVnntbTzk7O6kK2RdxwWVsGfPzeLKbF7bgeKBqWqCU...

CVE-2025-62418

creationtimestamp| type| source ---|---|--- 2025-10-16 20:41:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-fg89-g389-p346...

CVE-2025-62416

creationtimestamp| type| source ---|---|--- 2025-10-16 20:28:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-527q-4wqv-g9wj...

CVE-2025-59288

Improper verification of cryptographic signature in GitHub allows an unauthorized attacker to perform spoofing over an adjacent network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising eas...

CVE-2025-62381

creationtimestamp| type| source ---|---|--- 2025-10-15 17:03:21+00:00| published-proof-of-concept| https://github.com/ciscoheat/sveltekit-superforms/security/advisories/GHSA-hwmc-4c8j-xxj7...

CVE-2025-62379

Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint automatically assigns the redirectto query parameter value directly to client-side links without any validation and triggers automatic clicks when the page loads in a...

GHSA-5RRX-JJJQ-Q2R5

creationtimestamp| type| source ---|---|--- 2025-10-15 11:35:09+00:00| seen| https://bsky.app/profile/appsecfeed.bsky.social/post/3m3a5mcs3go2d 2025-10-24 11:40:04+00:00| seen| https://gist.github.com/dhmosfunk/0b74940802f1c0e6b4e39101b301072c...