6662 matches found
CGA-W5M9-9WXJ-CF3Q
Bulletin has no description...
CGA-VJ6P-22CM-WPGH
Bulletin has no description...
MINI-87GQ-6XM3-XFFC
Bulletin has no description...
CVE-2025-14134
creationtimestamp| type| source ---|---|--- 2025-12-06 14:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7dazzn5mx2q 2025-12-07 09:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m7f67qi4li2r...
MINI-P475-Q6CJ-F79W
Bulletin has no description...
EUVD-2025-201342
The SSP Debug plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0. This is due to the plugin storing PHP error logs in a predictable, web-accessible location wp-content/uploads/ssp-debug/ssp-debug.log without any access controls. This...
MINI-4MVX-GFHW-2FQQ
Bulletin has no description...
GFI KerioControl < 9.4.5 HTTP Response Splitting
GFI KerioControl version prior to 9.4.5 is affected by an HTTP Response Splitting vulnerability. Due to a not properly sanitized GET parameter used to generate a Location HTTP header in a 302 HTTP response an attacker can exploit this vulnerability to perform an Open Redirect or HTTP Response...
Introducing Wiz SAST: Where Code Risk Meets Cloud Context
Modern code runs in complex and distributed cloud environments. Wiz SAST meets this complexity by correlating code flaws with real cloud context–including where workloads run, what they can access, and how exposed they are...
Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24)
This week on the Lock and Code podcast … It's often said online that if a product is free, you're the product, but what if that bargain was no longer true? What if, depending on the device you paid hard-earned money for, you still became a product yourself, to be measured, anonymized, collated,...
PT-2025-48743
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-65622
Summary of CVE-2025-65622 (Snipe-IT): Snipe-IT versions prior to 8.3.4 are affected by a stored XSS flaw in the Locations “Country” field. An authenticated, low-privilege user can inject JavaScript that executes in another user’s session. Connected advisories corroborate the issue and identify th...
CGA-CHQ2-FV5G-3PF9
Bulletin has no description...
MAL-2025-191719 Malicious code in discordhelper-ecr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in discordhelper-ecr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Next-Generation MIMO Transceivers for Integrated Sensing and Communications: Unique Security Vulnerabilities and Solutions
Integrated sensing and communications ISAC, which is recognized as a key enabler for sixth generation 6G, has brought new opportunities for intelligent, sustainable, and connected wireless networks. Multiple-input multiple-output MIMO transceiver technology lies at the core of this paradigm,...
How To Hide Your Country Location on X (Twitter) by Switching to Region
X formerly known as Twitter has added a new location detail in its account transparency section. It shows…...
MINI-J7HF-XMMJ-7F55
Bulletin has no description...