3586 matches found
CVE-2025-64095
creationtimestamp| type| source ---|---|--- 2025-10-29 00:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22 2025-10-29 00:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u 2025-10-31 04:18:20+00:00| seen|...
WordPress plugin Social Feed Gallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
GHSA-27C9-VP3W-6WW8 Shopware exposes sensitive user information via CSV export mapping
Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...
Shopware exposes sensitive user information via CSV export mapping
Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...
CVE-2025-62518
creationtimestamp| type| source ---|---|--- 2025-10-21 14:28:10+00:00| published-proof-of-concept| https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-j5gw-2vrg-8fgx 2025-10-21 15:18:29+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3m3pmuuj7k6y2...
Reolink desktop application 安全漏洞
Reolink desktop application is a security camera monitoring software from Reolink USA. A security vulnerability exists in the Reolink desktop application that stems from the use of hard-coded and predictable AES encryption keys to encrypt user profiles, which could lead to a local attacker...
PT-2025-45650
Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...
CERTFR-2025-ACT-045
creationtimestamp| type| source ---|---|--- 2025-10-20 13:10:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m3mvbm2aoq2y 2025-10-20 13:10:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115406656997632462 2025-10-20 14:55:15+00:00| seen|...
CVE-2025-41028
creationtimestamp| type| source ---|---|--- 2025-10-20 10:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mmlaqhmv2s 2025-10-20 11:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mpxlghz52h...
Broken Access Control
Indico is vulnerable to Broken Access Control. the vulnerability is due to improper authorization logic that fails to verify the caller's privileges, allowing attackers to invoke the API and obtain profile details of other users without admin permissions...
CVE-2025-34253
D-Link Nuclias Connect firmware versions
F5 BIG-IP 缓冲区错误漏洞
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that stems from a specially crafted request that could cause the Traffic Management Microkern...
F5 Networks BIG-IP : BIG-IP AFM security exposure (K000150010)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K000150010 advisory. After a reboot, the BIG-IP AFMipsdprocess may unexpectedly fail to enforce the Intrusion Prevention System IPS...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in the F5 BIG-IP that originates when configuring security policies and server-side HTTP/2 profiles, where...
CVE-2025-59999
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when visited by another user, enables the attacker to execute commands with the target...
North Korean Scammers Are Doing Architectural Design Now
New research shows that North Koreans appear to be trying to trick US companies into hiring them to develop architectural designs using fake profiles, résumés, and Social Security numbers...
CVE-2025-21050
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles...
CVE-2025-21050
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles...
