CVE-2025-57205

iNiLabs School Express SMS Express 6.2 is affected by a Stored Cross-Site Scripting XSS vulnerability in the content-management features available to authenticated admin users. The vulnerability resides in POSTed editor parameters submitted to the /posts/edit/id endpoint and similarly in Notice a...

CVE-2025-39847

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

BELL-CVE-2023-53420

Bulletin has no description...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : xmltodict vulnerability (USN-7753-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7753-1 advisory. Camilo Vera discovered that xmltodict parsed maliciously crafted XML input, contrary to expectations. An...

CVE-2025-7746

creationtimestamp| type| source ---|---|--- 2025-09-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-259-01...

PT-2025-37922

Name of the Vulnerable Software and Affected Versions: Megatek Communication System Azora Wireless Network Management versions through 20250916 Description: The software contains an SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for SQL...

CVE-2022-50246

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpciregisterport I got the following report while doing devicemt6370-tcpc load test with CONFIGOFUNITTEST and CONFIGOFDYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1...

openSUSE Security Advisory (SUSE-SU-2025:03162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-10214

creationtimestamp| type| source ---|---|--- 2025-09-10 12:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiayhfnzv2r...

Linux Distros Unpatched Vulnerability : CVE-2018-19993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reflected cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase paramete...

CVE-2007-6144

creationtimestamp| type| source ---|---|--- 2025-09-09 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjg3thn22...

PT-2025-36568

Name of the Vulnerable Software and Affected Versions: Tautulli versions prior to 2.16.0 Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The real pms image proxy endpoint is vulnerable to path traversal, allowing unauthenticated attackers to read...

CVE-2025-8085

creationtimestamp| type| source ---|---|--- 2025-09-08 18:36:00+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-8085.yaml 2025-09-10 03:17:10+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3lyhbhmai372x 2025-09-11 03:18:33+00:00|...

openSUSE Security Advisory (SUSE-SU-2025:03073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-45425 Malicious code in ogi-naget55-kyuki (npm)

The package ogi-naget55-kyuki was found to contain malicious code...

MAL-2025-43155 Malicious code in @zalastax/nolb-bsq (npm)

The package @zalastax/nolb-bsq was found to contain malicious code...

MAL-2025-44198 Malicious code in face-kids-correct (npm)

The package face-kids-correct was found to contain malicious code...

CVE-2025-58607

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...