CVE-2025-55306

GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...

GHSA-MMXM-8W33-WC4H vulnerabilities

Vulnerabilities for packages: hadoop-fips, trino, apache-nifi-registry, apache-activemq-artemis, ranger, neo4j, jenkins, solr, apache-nifi...

MAL-2025-41421 Malicious code in k7eel2-ss (PyPI)

The package downloads and executes an executable from a hardcoded URL. The executable is classifed as Trojan and confirmed by 47 top sources. The package downloads malware from https://github.com/deprosinal/legendary-funicular github repo, namely helo.exe --- -= Per source details. Do not edit...

PT-2025-51825

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.6 Mattermost GitHub plugin versions through 2.4.0 Description The software does not properly validate the identity of plugin bots when forwarding reactions. This allows attackers to misuse the GitHub...

Linux Distros Unpatched Vulnerability : CVE-2025-54956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...

GHSA-MMXM-8W33-WC4H

creationtimestamp| type| source ---|---|--- 2025-08-20 19:47:18+00:00| seen| https://seclists.org/oss-sec/2025/q3/131...

MAL-2025-191749 Malicious code in hashstation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4f136247c8a57eee83a1a36ee355c982d900b5f5b570a0936dc1df68db6d5f2 When using methods from the package, it downloads an obfuscated code from Github and puts it in multiple localisation. While it appears that this code is used ...

GHSA-R4MF-MR9H-F27M

creationtimestamp| type| source ---|---|--- 2025-08-20 02:26:07+00:00| seen| https://gist.github.com/Anudeepkadambala/88c6065f1de1597be96e50a573cde56e...

GHSA-HQR4-4GFC-5P2J

creationtimestamp| type| source ---|---|--- 2025-08-19 18:39:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115056886214495468...

CVE-2025-55306 GenX_FX authentication bypass in JWT validation

GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...

CVE-2025-55306

GenX_FX backend vulnerability: environment-variable misconfiguration can expose API keys and authentication tokens, enabling unauthorized access to cloud resources (Google Cloud, Firebase, GitHub, etc.). Impact is high (credential exposure with potential full resource access) as reported across m...

GHSA-R936-GWX5-V52F vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi-registry...

CVE-2023-1893

creationtimestamp| type| source ---|---|--- 2025-08-19 11:41:12+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-1893.yaml 2025-08-23 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulqp22b2z...

CVE-2020-36708

creationtimestamp| type| source ---|---|--- 2025-08-19 03:00:06+00:00| seen| Telegram/-Fva4EPYFaBqns2Cr0zCt3lPp7sYwzJV4LoxTKWmPvbqvA 2025-08-19 05:58:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-36708.yaml 2025-08-21 21:02:32+00:00|...

PT-2025-33843 · Microsoft +2 · Github +3

Name of the Vulnerable Software and Affected Versions: GenX FX affected versions not specified Description: GenX FX is an IA trading platform focused on forex trading. A flaw in the backend may expose API keys and authentication tokens if environment variables are misconfigured. This could allow...

GO-2025-3868 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...

GO-2025-3867 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...

GO-2025-3869 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...

GO-2025-3886 OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin

OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin...

GO-2025-3875 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...