CVE-2025-54581

creationtimestamp| type| source ---|---|--- 2025-07-30 23:47:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7sndhtr32z...

CVE-2025-43245

creationtimestamp| type| source ---|---|--- 2025-07-30 21:42:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7lmzfbws2s...

CVE-2025-54576

An authentication bypass flaw was found in the OAuth2-Proxy project. This bypass affects systems that have configured their deployment to skip authentication on endpoints that match a deployment-defined regular expression. HTTP parameters can be used to match and trigger the authentication bypass...

CVE-2024-45955

creationtimestamp| type| source ---|---|--- 2025-07-30 20:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7il2o7yw2p...

CVE-2025-54388

A firewall state management issue was found in the Moby project. When the firewalld service is reloaded, it removes all iptables rules, including those created by Docker. While Docker should automatically recreate these rules, versions before 28.3.3 fail to recreate the specific rules that block...

CVE-2025-50578

creationtimestamp| type| source ---|---|--- 2025-07-30 17:22:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7542hzfa2e 2025-07-31 06:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvahjpj4uq2h 2026-04-01 05:00:11+00:00| confirmed|...

CVE-2025-50578

LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically X-Forwarded-Host and Referer. An unauthenticated remote attacker can manipulate these headers to perform Host Header Injection and Open Redirect attacks. This allows the loading...

CVE-2025-53357

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

CVE-2025-54388

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including...

CVE-2025-54388 Moby's Firewalld reload makes published container ports accessible from remote hosts

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including...

CVE-2025-43202

creationtimestamp| type| source ---|---|--- 2025-07-30 12:22:41+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3lv6mefs5h22e 2025-09-09 22:16:23+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3lygqnrnuxl2t 2026-04-03 15:23:03+00:00| seen|...

CVE-2025-38498

In the Linux kernel, the following vulnerability has been resolved: dochangetype: refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount2...

CVE-2025-38498

In the Linux kernel, the following vulnerability has been resolved: dochangetype: refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount2...

CVE-2025-4422

creationtimestamp| type| source ---|---|--- 2025-07-30 03:07:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv5nd2fcfm2s 2025-07-30 06:01:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lv5x2d5nii2k...

CVE-2025-7994

creationtimestamp| type| source ---|---|--- 2025-07-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-714/...

CVE-2025-7996

creationtimestamp| type| source ---|---|--- 2025-07-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-716/...

CVE-2025-43246

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...

CVE-2025-43193

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service...

CVE-2025-24119

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...