CVE-2025-64875

creationtimestamp| type| source ---|---|--- 2025-12-11 01:45:04+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7oh7n2kuo2o...

CVE-2025-11414

creationtimestamp| type| source ---|---|--- 2025-12-11 00:30:27+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m7od2756u523 2025-12-11 00:30:37+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m7od2j6xti2p 2025-12-11 06:48:37+00:00| seen|...

CVE-2025-11413

creationtimestamp| type| source ---|---|--- 2025-12-11 00:30:27+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m7od2756u523 2025-12-11 00:30:37+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m7od2j6xti2p 2025-12-11 06:48:37+00:00| seen|...

CVE-2025-67510

creationtimestamp| type| source ---|---|--- 2025-12-11 00:02:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/115697999974272387 2025-12-11 00:02:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7obj33kme2n 2025-12-11 01:10:24+00:00| seen|...

CVE-2024-58279

creationtimestamp| type| source ---|---|--- 2025-12-11 00:01:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7obgckvdh2c...

Microweber 跨站脚本漏洞

Microweber is Microweber open source online store management system that provides drag and drop functionality. The system includes modules for adding products, images and more. A cross-site scripting vulnerability exists in Microweber version 2.0.15, which stems from the presence of stored...

PT-2025-50743

Name of the Vulnerable Software and Affected Versions Microweber version 2.0.15 Description The software contains a stored cross-site scripting issue that allows authenticated attackers to inject malicious scripts into user profile fields. Specifically, attackers can input script payloads into th...

CVE-2024-58284

creationtimestamp| type| source ---|---|--- 2025-12-10 23:56:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ob5e5sbf2y...

CVE-2025-65294

creationtimestamp| type| source ---|---|--- 2025-12-10 23:10:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7o6kyv2i42g...

GHSA-VG28-83RP-8XX4

creationtimestamp| type| source ---|---|--- 2025-12-10 23:03:38+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m7o66wzd6q2a 2025-12-11 00:05:03+00:00| seen| https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3m7obmrdszu2x...

CVE-2020-36888

creationtimestamp| type| source ---|---|--- 2025-12-10 22:18:57+00:00| seen| https://bsky.app/profile/potato.software/post/3m7o3p2rfwm24...

CVE-2025-66474 XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient protection against /html injection, which...

CVE-2025-66474 XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient protection against /html injection, which...

CVE-2025-64538

creationtimestamp| type| source ---|---|--- 2025-12-10 21:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nxcbuw2q2q 2025-12-13 01:39:29+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7thtimket2v...

CVE-2025-64593

creationtimestamp| type| source ---|---|--- 2025-12-10 20:09:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nuh46cnd2o...

CVE-2025-64553

creationtimestamp| type| source ---|---|--- 2025-12-10 19:36:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nslxj6nf2o...

CVE-2025-67720

creationtimestamp| type| source ---|---|--- 2025-12-10 18:36:27+00:00| published-proof-of-concept| https://github.com/Mayuri-Chan/pyrofork/security/advisories/GHSA-6h2f-wjhf-4wjx 2025-12-11 03:29:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7on2ctqum2x...

CVE-2025-34423

creationtimestamp| type| source ---|---|--- 2025-12-10 17:30:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nlllb3k42y...

XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

GHSA-9XC6-C2RM-F27P XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...