CVE-2025-12121

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching core.lua, drag-and-drop file handling rootview.lua, and the “open i...

CVE-2025-10571

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1...

CVE-2025-41074

creationtimestamp| type| source ---|---|--- 2025-11-20 17:18:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63bl5zznj26...

CVE-2025-40601

creationtimestamp| type| source ---|---|--- 2025-11-20 14:05:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m62wrmzsxs2n 2025-11-20 15:05:55+00:00| seen| https://threatintel.cc/2025/11/20/new-sonicwall-sonicos-flaw-allows.html 2025-11-20 16:05:47+00:00| seen|...

expat security update

An update is available for expat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat...

CVE-2025-13423

creationtimestamp| type| source ---|---|--- 2025-11-20 00:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ziqtyps32n...

EUVD-2025-198204

An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...

CVE-2025-65103

creationtimestamp| type| source ---|---|--- 2025-11-19 13:42:10+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-2jm2-2p35-rp3j 2025-11-19 21:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5z6343nhz2u...

CVE-2025-13107

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-65939

creationtimestamp| type| source ---|---|--- 2025-11-19 05:46:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xkhh5ryk2b...

CVE-2025-65935

creationtimestamp| type| source ---|---|--- 2025-11-19 05:18:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xivb2oz42n...

EUVD-2025-198090

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting XSS vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's...

AlmaLinux 9 : haproxy (ALSA-2025:21693)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:21693 advisory. haproxy: denial of service vulnerability in HAProxy mjson library CVE-2025-11230 Tenable has extracted the preceding description block directly from the AlmaLinux...

EUVD-2025-198213

The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...

RHEL 8 : bind (RHSA-2025:21735)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21735 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...

CVE-2025-13080

creationtimestamp| type| source ---|---|--- 2025-11-18 17:17:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wamccvly2a...

CVE-2025-55179

creationtimestamp| type| source ---|---|--- 2025-11-18 15:11:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115571338849048787...

CVE-2025-6670

creationtimestamp| type| source ---|---|--- 2025-11-18 12:49:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vrlxlhx72k...

CVE-2025-12528

creationtimestamp| type| source ---|---|--- 2025-11-18 10:33:42+00:00| seen| https://gist.github.com/Darkcrai86/2f2abc7f00beb958f8fbd0bee9fd41cb 2025-11-18 12:24:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vqaialwp2s...

CVE-2025-52025

creationtimestamp| type| source ---|---|--- 2025-11-18 10:14:33+00:00| seen| https://gist.github.com/ReverseThatApp/4a6be2b9b2ba39d38c35c8753e0afd39 2026-01-23 23:18:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4tjinaqr2j 2026-01-26 18:16:54+00:00| seen|...