CVE-2025-54429

creationtimestamp| type| source ---|---|--- 2025-07-28 23:12:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ppvo5qa2w...

GHSA-QXP5-GWG8-XV66

creationtimestamp| type| source ---|---|--- 2025-07-28 21:50:46+00:00| seen| https://gist.github.com/puerco/0e45f7acdb725a96b024bfea9e9225de...

CVE-2025-54423

copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5...

CVE-2025-54299

creationtimestamp| type| source ---|---|--- 2025-07-28 20:03:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2f7ekod52h 2025-07-29 07:28:24+00:00| seen| https://bsky.app/profile/jensen.technology/post/3lv3lhbkzkz2h...

CVE-2025-54529

creationtimestamp| type| source ---|---|--- 2025-07-28 19:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2e4tpuhp2h...

CVE-2025-54532

creationtimestamp| type| source ---|---|--- 2025-07-28 19:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2dq5ojfp23...

CVE-2025-54418

creationtimestamp| type| source ---|---|--- 2025-07-28 16:59:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv22vtipl72j 2025-07-29 15:55:07+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3lv4hrdekc72v 2025-07-30 07:40:38+00:00| seen|...

CVE-2025-38494

In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hidhwrawrequest hidhwrawrequest is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those checks and allowed invalid...

CVE-2025-54569

creationtimestamp| type| source ---|---|--- 2025-07-28 15:24:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzvltflsz2o...

CVE-2025-53696

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...

CVE-2025-54369

creationtimestamp| type| source ---|---|--- 2025-07-28 13:59:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3luzque5p7k2y 2025-07-30 04:40:08+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lv5sj6f27c2b...

CVE-2025-8266

creationtimestamp| type| source ---|---|--- 2025-07-28 13:47:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzq6ctqh32o 2026-02-11 09:38:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-8266.yaml 2026-04-03...

CVE-2025-38478

Technical details for CVE-2025-38478 are not publicly available in the provided documents. The initial report describes Linux kernel Comedi instruction data initialization issues; monitor for updates.

CVE-2025-38471

CVE-2025-38471 concerns the Linux kernel TLS path. The TLS queue can operate on an old skb after aggressive net-next skb compaction, leading to a slab-use-after-free in tls_strp_check_rcv. The Astra Linux bulletin confirms the fix is to always refresh the queue when reading a socket, instead of r...

CVE-2025-8265 299Ko CMS File Management view unrestricted upload

A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...

PT-2025-31154 · Polkadot · Polkadot Frontier

Name of the Vulnerable Software and Affected Versions: Polkadot Frontier versions prior to 0822030 Description: Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The implementation of CallableByContract incorrectly identified contract addresses running under...

CVE-2025-28353

creationtimestamp| type| source ---|---|--- 2025-07-27 23:57:23+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3luybrrvvpc2i...

CVE-2015-10142

Sitecore Experience Platform XP prior to 8.0 Initial Release rev. 141212 and Content Management System CMS prior to 7.2 Update-3 rev. 141226 and prior to 7.5 Update-1 rev. 150130 contain a vulnerability that may allow an attacker to download files under the web root of the site when the name of t...

CVE-2025-8222 jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java cross site scripting

A vulnerability, which was classified as problematic, has been found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this issue is some unknown functionality of the file GoodsController.java. The manipulation leads to cross site scripting. The...

CVE-2024-58264

The CVE-2024-58264 entry concerns the Rust crate serde-json-wasm prior to 1.0.1, where deeply nested JSON data can cause stack consumption/overflow. Reported impacts include potential denial of service via stack exhaustion; some sources describe the issue as a stack overflow during recursive JSON...