CVE-2025-53492

creationtimestamp| type| source ---|---|--- 2025-07-02 17:39:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyqyob2yi2q...

CVE-2025-52891

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xml, and at least...

CVE-2025-38091

creationtimestamp| type| source ---|---|--- 2025-07-02 17:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyp75rak52p 2025-07-23 01:14:59+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lultrwme4c2p 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-53109

Model Context Protocol Servers is a collection of reference implementations for the model context protocol MCP. Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01...

CVE-2025-38091

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get planeid Why & How Fix a false positive warning which occurs due to lack of correct checks when querying planeid in DML21. This fixes the warning when performing a mode1 reset...

CVE-2025-38001

creationtimestamp| type| source ---|---|--- 2025-07-02 11:47:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsy5d6hjlk2d 2025-07-02 15:38:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsykbblxm22d 2025-07-12 03:00:05+00:00|...

CVE-2025-52462

creationtimestamp| type| source ---|---|--- 2025-07-02 09:06:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxueftojw2r 2025-07-06 20:55:49+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ltd5tu7zpk2u...

CVE-2025-4689

creationtimestamp| type| source ---|---|--- 2025-07-02 08:55:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxtqmvdjc2r...

Malicious code in identification-card-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f07ce1c75c62d4d9c717c72e271cf8c7ff2c01ecfb240af7c2299c8c662f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5561 Malicious code in identification-card-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f07ce1c75c62d4d9c717c72e271cf8c7ff2c01ecfb240af7c2299c8c662f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in identification-card-component

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

CVE-2025-53103

JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...

CVE-2025-6953

creationtimestamp| type| source ---|---|--- 2025-07-01 17:07:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsw6qrz4d52o...

CVE-2024-35164

creationtimestamp| type| source ---|---|--- 2025-07-01 16:00:15+00:00| seen| https://seclists.org/oss-sec/2025/q3/1 2025-07-01 19:21:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lswg7qdcfb2j 2025-07-02 13:37:06+00:00| seen|...

CVE-2025-34059

creationtimestamp| type| source ---|---|--- 2025-07-01 15:08:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20047 2025-07-02 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dprbqn2i 2026-01-08 00:00:00+00:00| seen| The Shadowserver...

CVE-2025-37098

creationtimestamp| type| source ---|---|--- 2025-07-01 15:03:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114778583008935449 2025-07-01 15:07:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20040...