PT-2026-1362

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain an infinite loop within the CalcProfileID function in the IccProfile.cpp file...

CVE-2020-128129

creationtimestamp| type| source ---|---|--- 2026-01-05 23:06:13+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mbpkhgxhxk2s...

CVE-2025-67732

creationtimestamp| type| source ---|---|--- 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-06 00:22:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpopleedi2x 2026-01-07 04:15:13+00:00| seen|...

CVE-2025-69223

creationtimestamp| type| source ---|---|--- 2026-01-05 22:19:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbpht725av2a 2026-01-05 23:05:33+00:00| published-proof-of-concept| Telegram/SaQdu2HuKivKnxzQDHW0crSXnl1eIl3nAV9Cs1OYgaU4ueA 2026-01-11 11:33:45+00:00| seen|...

CVE-2025-68436

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the...

CVE-2026-0621

creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:46+00:00| seen| Telegram/dnE6g3S2HF2ctEv4QL4AWKZnSnaJLWH3AV76rFV0fRF-qPg 2026-01-05 22:08:09+00:00| published-proof-of-concept| Telegram/xlMb889KHCkjGwOhz74MLJcLt1SuJvfoBpkCbRNPnO6PTQk 2026-01-05 23:49:14+00:00| seen|...

CVE-2025-64424

creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:46+00:00| seen| Telegram/dnE6g3S2HF2ctEv4QL4AWKZnSnaJLWH3AV76rFV0fRF-qPg 2026-01-05 23:52:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpn35mv7s2e 2026-09-01 20:00:13+00:00| seen| https://t.me/hackingAttack/180927...

CVE-2025-68436 Craft CMS vulnerable to potential information disclosure via unchecked asset relocation

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the...

CVE-2025-68436 Craft CMS vulnerable to potential information disclosure via unchecked asset relocation

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the...

EUVD-2026-0846

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the...

CVE-2025-59955

creationtimestamp| type| source ---|---|--- 2026-01-05 21:23:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpeq3j2fd2y...

CVE-2025-67397

creationtimestamp| type| source ---|---|--- 2026-01-05 21:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpe66mibt2q 2026-01-07 03:29:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbsjmpwpjc2e...

CVE-2025-52515

creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpdva6jho2x...

CVE-2025-49495

creationtimestamp| type| source ---|---|--- 2026-01-05 20:35:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpc2aqutv2x 2026-01-05 22:46:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbpjejdv5u2t...

CVE-2025-61781

creationtimestamp| type| source ---|---|--- 2026-01-05 19:06:46+00:00| seen| Telegram/-WkPGYxQLne2Z5X7oW7Cjya-7O5zQTo5z5b79nEyipWZqE 2026-01-05 20:43:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpcj6hh7m2e...

CVE-2025-61246

creationtimestamp| type| source ---|---|--- 2026-01-05 19:00:10+00:00| published-proof-of-concept| Telegram/uMCzxGgr2x3STZAp0ylOr-SeDC6RAcnQeh3DqIsWZXD5kaQ 2026-01-05 21:00:04+00:00| published-proof-of-concept| Telegram/NXxnKLZSaBlQTQxt0WJ9c3G9QPSHY40ZYnU5qA6mvG8vUA 2026-01-08 22:23:36+00:00| see...

CVE-2025-55204

creationtimestamp| type| source ---|---|--- 2026-01-05 18:21:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbp2ky5zo42t 2026-01-05 19:06:38+00:00| published-proof-of-concept| Telegram/fMtvesIEGvLKzgXVr04EQ2rBgwnPRUk0FUIDqd1543CWh4 2026-01-05 21:44:39+00:00| seen|...

CVE-2025-69194

creationtimestamp| type| source ---|---|--- 2026-01-05 18:18:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mbp2ea6flw2c 2026-01-07 01:23:45+00:00| seen| https://seclists.org/oss-sec/2026/q1/30 2026-01-07 07:00:13+00:00| published-proof-of-concept|...

Incorrect Authorization

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Incorrect Authorization due to unchecked asset relocation in user profile photos. Remediation Upgrade craftcms/cms to version 4.16.17, 5.8.21 or higher. References - GitHub Commit Credit: Z3r...

GHSA-53VF-C43H-J2X9 Craft CMS vulnerable to potential information disclosure via unchecked asset relocation

Authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the patched versions 5.8.21 and 4.16.17 to mitigate the issue. Resources:...