3136 matches found
CVE-2022-50031
creationtimestamp| type| source ---|---|--- 2025-08-07 02:11:21+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvrnwmnqqo2v 2025-08-07 02:13:24+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lvrnwriorv42...
CVE-2025-48530
creationtimestamp| type| source ---|---|--- 2025-08-05 10:46:42+00:00| seen| https://t.me/UzbeHackers/2537 2025-08-05 15:17:56+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvnyswpjs3k2 2025-08-05 15:40:46+00:00| seen|...
Simulating Cyberattacks through a Breach Attack Simulation (BAS) Platform Empowered by Security Chaos Engineering (SCE)
In today digital landscape, organizations face constantly evolving cyber threats, making it essential to discover slippery attack vectors through novel techniques like Security Chaos Engineering SCE, which allows teams to test defenses and identify vulnerabilities effectively. This paper proposes...
PhishParrot: LLM-Driven Adaptive Crawling to Unveil Cloaked Phishing Sites
Phishing attacks continue to evolve, with cloaking techniques posing a significant challenge to detection efforts. Cloaking allows attackers to display phishing sites only to specific users while presenting legitimate pages to security crawlers, rendering traditional detection systems ineffective...
CVE-2025-51503
A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...
CVE-2025-51503
A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...
CVE-2025-50849
CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference IDOR. The user profile functionality allows enabling or disabling stickers through a parameter companyid sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate...
CVE-2025-51503
A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...
RLSA-2025:4043 Moderate: bluez security update
The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts Rocky Enterprise Software Foundation, and pcmcia configuration files. Security Fixes: BlueZ: Audio Profile AVRCP Improper Validation of Array Inde...
CVE-2023-2533
creationtimestamp| type| source ---|---|--- 2025-07-28 15:00:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3luzuaqymgn2e 2025-07-28 16:07:00+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxxo34xw2d 2025-07-29 02:51:00+00:00| seen|...
CVE-2025-26469
creationtimestamp| type| source ---|---|--- 2025-07-28 13:56:19+00:00| seen| https://bsky.app/profile/potato.software/post/3luzqnz3jio2m 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v...
CVE-2025-54296
A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...
Infinite loop
Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Malicious code in webxr-input-profiles (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6325 Malicious code in webxr-input-profiles (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-54090
creationtimestamp| type| source ---|---|--- 2025-07-23 19:23:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lunqmetiv225 2025-07-24 00:10:05+00:00| seen| https://bsky.app/profile/lobsters-feed.bsky.social/post/3luoamu363o2j 2025-07-24 05:30:09+00:00| seen|...
CVE-2025-54296
A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...
CVE-2025-54296
A stored Cross‑Site Scripting (XSS) vulnerability exists in the ProFiles component for Joomla, affecting versions 1.0 through 1.5.0. The issue is described in multiple sources (notably PT-2025-30569 and CVE records) as allowing injection/storage of scripts within the application. The connected do...
