CVE-2025-64064

Primakon Pi Portal 1.0.18 /api/v2/ppusers endpoint fails to adequately check user permissions before processing a PATCH request to modify the PPSECURITYPROFILEID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using...

CVE-2025-65675

Stored Cross site scripting XSS vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures...

CVE-2025-65675

The CVE-2025-65675 entry concerns Classroomio LMS 0.1.13, with a stored XSS vulnerability triggered by crafted SVG profile/cover images. The Red Hat, EUVD, NVD, and OSV records confirm the issue is an authenticated XSS that can execute arbitrary code via SVG uploads. The root cause is unsanitized...

PT-2025-48175

Name of the Vulnerable Software and Affected Versions Classroomio LMS version 0.1.13 Description A stored cross site scripting XSS issue exists in Classroomio LMS version 0.1.13. Authenticated attackers can execute arbitrary code by using specially crafted SVG profile pictures. The issue allows f...

ClassroomIO.com 安全漏洞

ClassroomIO.com is an educational platform open-sourced by ClassroomIO. A security vulnerability exists in ClassroomIO.com version 0.1.13, which originates in stored cross-site scripting and could allow an authenticated attacker to execute arbitrary code via a specially crafted SVG profile pictur...

CVE-2025-61167

creationtimestamp| type| source ---|---|--- 2025-11-25 22:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ifmvw3gs2x...

CVE-2025-65647

creationtimestamp| type| source ---|---|--- 2025-11-25 22:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ifdxiu6g2s...

CVE-2025-66016

creationtimestamp| type| source ---|---|--- 2025-11-25 22:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6iej47yxb2s...

CVE-2025-64065

creationtimestamp| type| source ---|---|--- 2025-11-25 21:53:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6idbjtngu2q...

CVE-2025-64063

creationtimestamp| type| source ---|---|--- 2025-11-25 21:50:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6id52itdb2s...

EUVD-2025-199638

Primakon Pi Portal 1.0.18 /api/v2/ppusers endpoint fails to adequately check user permissions before processing a PATCH request to modify the PPSECURITYPROFILEID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using...

CVE-2025-64064

Primakon Pi Portal 1.0.18 /api/v2/ppusers endpoint fails to adequately check user permissions before processing a PATCH request to modify the PPSECURITYPROFILEID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using...

CVE-2025-64064

Primakon Pi Portal 1.0.18 /api/v2/ppusers endpoint fails to adequately check user permissions before processing a PATCH request to modify the PPSECURITYPROFILEID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using...

CVE-2025-36270

creationtimestamp| type| source ---|---|--- 2025-11-25 11:18:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m6h7s6fwms27...

CVE-2025-62691

creationtimestamp| type| source ---|---|--- 2025-11-25 09:33:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gzwst4rt2b 2025-11-25 10:32:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/115609879797353836 2025-11-25 10:32:52+00:00| seen|...

CVE-2025-64304

creationtimestamp| type| source ---|---|--- 2025-11-25 08:11:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gvdz73m32k...

CVE-2025-66179

creationtimestamp| type| source ---|---|--- 2025-11-25 07:42:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gtpgcnlr2j...

CVE-2025-66180

creationtimestamp| type| source ---|---|--- 2025-11-25 07:39:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gtkjwmzs2n...

CVE-2025-65944

creationtimestamp| type| source ---|---|--- 2025-11-25 04:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ghh6hdzn2w...

CVE-2025-6389

creationtimestamp| type| source ---|---|--- 2025-11-25 02:38:45+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3m6gcqv3lnn2o 2025-11-25 03:03:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/115608111943275596 2025-11-25 03:03:16+00:00| seen|...