CVE-2025-67746

Composer 2.x is vulnerable to ANSI sequence injection in terminal output when downloading from remote sources. Affected: 2.2.x before 2.2.26 and 2.9.x before 2.9.3. Root cause: remote sources can inject ANSI control characters into command output, potentially causing mangled output and terminal D...

CVE-2025-69025

creationtimestamp| type| source ---|---|--- 2025-12-30 12:23:40+00:00| seen| https://gist.github.com/Darkcrai86/daf9b003d64856938bf5305af949749a 2025-12-30 13:33:48+00:00| seen| https://gist.github.com/Darkcrai86/51b434e4cdffd09b6493ddb74d99cb19...

CVE-2025-69092

creationtimestamp| type| source ---|---|--- 2025-12-30 12:18:26+00:00| seen| https://gist.github.com/Darkcrai86/6cd20cf5bf45ae912d0cf97f63262313 2025-12-30 13:30:49+00:00| seen| https://gist.github.com/Darkcrai86/5b281448f59e3bbee4200f8c778ec916 2026-01-08 22:13:35+00:00|...

CVE-2025-15359

creationtimestamp| type| source ---|---|--- 2025-12-30 10:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb75dgs3b42x 2025-12-30 11:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb7744vb4q2p 2026-01-05 17:01:58+00:00| published-proof-of-concept|...

CVE-2025-61037

creationtimestamp| type| source ---|---|--- 2025-12-30 08:05:47+00:00| seen| https://gist.github.com/GunP4ng/42b19ee99e94c315173b74a9fb26c2b9 2025-12-30 08:33:01+00:00| seen| https://gist.github.com/jc0818/233462416579661e4e2795f96457a6bf 2026-01-02 21:53:17+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-67746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads...

CVE-2025-13592

creationtimestamp| type| source ---|---|--- 2025-12-29 20:51:03+00:00| seen| https://gist.github.com/Darkcrai86/25b83b6c2aa93748db91a065f20b9069 2025-12-29 21:00:41+00:00| seen| https://gist.github.com/Darkcrai86/fca5560cadd7f8c78d287842d04537f8...

CVE-2025-55061

creationtimestamp| type| source ---|---|--- 2025-12-29 18:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5hq62ur32y 2025-12-29 19:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb5jhstx6z2g...

CVE-2025-15191

creationtimestamp| type| source ---|---|--- 2025-12-29 14:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb52ixhcjl2c 2025-12-29 15:11:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803495870167323...

CVE-2025-15189

creationtimestamp| type| source ---|---|--- 2025-12-29 13:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4wkg5pdg2u 2025-12-29 13:37:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4xgjil2h2y 2025-12-29 15:11:56+00:00| seen|...

CVE-2025-15227

creationtimestamp| type| source ---|---|--- 2025-12-29 08:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4fgcf6wr2u 2025-12-29 08:38:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4gpfkbvg2b...

CVE-2025-60458

creationtimestamp| type| source ---|---|--- 2025-12-29 07:00:12+00:00| published-proof-of-concept| Telegram/0bS8XmiBZ6DuNmG6E0qg4EB43hWsPVptPwfOUv0NgieIr48 2025-12-29 09:00:05+00:00| published-proof-of-concept| Telegram/Rk3Pm0xazzAxLfp-nWuprn3TjhkjdHjxxzptFTkeMZjK45M...

CVE-2025-15154 PbootCMS Header handle.php get_user_ip less trusted source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

CVE-2025-15154 PbootCMS Header handle.php get_user_ip less trusted source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

Exploit for Insufficient Type Distinction in Rarlab Winrar

CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...

GHSA-9PF3-7RRR-X5JH

creationtimestamp| type| source ---|---|--- 2025-12-26 22:00:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115788113971481272 2025-12-26 22:00:18+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3mawc4er4xj2g...

CVE-2025-13915

creationtimestamp| type| source ---|---|--- 2025-12-26 14:43:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115786396429197847 2025-12-26 15:44:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115786635668538679 2025-12-27 06:04:12+00:00| seen|...

CVE-2025-59887

creationtimestamp| type| source ---|---|--- 2025-12-26 07:23:08+00:00| seen| https://bsky.app/profile/potato.software/post/3maur3wpuvv25 2025-12-26 07:44:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mausbxeisj2g 2025-12-26 08:31:01+00:00| seen|...

CVE-2025-15089

creationtimestamp| type| source ---|---|--- 2025-12-26 05:06:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/115784126495040116 2025-12-26 05:06:07+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3maujguwkrc26...

The vulnerability in the Request Handling component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to bypass existing security restrictions.

The vulnerability in the Request Handling component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow a malicious actor to bypass existing security...