CVE-2025-47761

creationtimestamp| type| source ---|---|--- 2025-12-23 12:16:46+00:00| seen| https://poliverso.org/objects/0477a01e-47032880-2067098942d068cb 2025-12-23 12:18:57+00:00| seen| https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3manq5hlshov2...

Assessing SIEM effectiveness

A SIEM is a complex system offering broad and flexible threat detection capabilities. Due to its complexity, its effectiveness heavily depends on how it is configured and what data sources are connected to it. A one-time SIEM setup during implementation is not enough: both the organization's...

Malicious code in cocoapod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-67418

creationtimestamp| type| source ---|---|--- 2025-12-23 02:36:05+00:00| seen| https://infosec.exchange/users/offseq/statuses/115766549791065291 2025-12-23 02:36:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mampnweqso2y 2026-01-02 18:48:53+00:00| published-proof-of-concept|...

CVE-2025-61740

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device...

CERTFR-2025-ACT-056

creationtimestamp| type| source ---|---|--- 2025-12-22 13:56:42+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3malf7z6yfx2c 2025-12-22 13:56:43+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115763563781757176 2025-12-28 01:17:54+00:00| seen|...

CVE-2025-14800

creationtimestamp| type| source ---|---|--- 2025-12-22 00:06:02+00:00| seen| https://infosec.exchange/users/offseq/statuses/115760297487526955 2025-12-22 00:06:03+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3majwsp6crm26 2025-12-22 11:33:53+00:00| seen|...

PT-2025-52651

Name of the Vulnerable Software and Affected Versions Network Device affected versions not specified Description An issue exists where authentication does not properly verify the source of network packets. This could allow an attacker to create a denial-of-service condition or modify the device...

CVE-2025-14992

creationtimestamp| type| source ---|---|--- 2025-12-21 07:05:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/115756285723242241 2025-12-21 07:05:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mai5seglda2g 2025-12-22 04:06:09+00:00| seen|...

CVE-2025-9343

creationtimestamp| type| source ---|---|--- 2025-12-21 04:05:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115755574768340057 2025-12-21 04:05:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mahtp2os7w2z 2025-12-22 11:36:42+00:00| seen|...

CVE-2025-12980

creationtimestamp| type| source ---|---|--- 2025-12-21 03:03:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/115755332944719218 2025-12-21 03:03:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mahqb3pva22y 2025-12-21 05:21:34+00:00| seen|...

CVE-2025-14180

creationtimestamp| type| source ---|---|--- 2025-12-20 02:01:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3maf4czwhdn26 2025-12-20 02:01:33+00:00| seen| https://bsky.app/profile/slackers.it/post/3maf4d6dt3p2l 2025-12-21 11:53:36+00:00| seen|...

Cross-site Scripting (XSS)

Overview @tutao/tutanota-utils is a This is a collection of common utils we use across multiple projects/modules internally. As creating this module really is just an intermediate step towards re-organising some of the dependency structure of our software, it is most likely going to change Affect...

Tuta Mail has DOM attribute and CSS injection in its Contact Viewer feature

Impact Users importing contacts from untrusted sources. Specifically crafted contact data can lead to some of DOM modifications for the link button next to the field e.g. the link address can be overriden. CSS can be manipulated to give the button arbitrary look and change it's size so that any...

CVE-2025-14946

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...

CVE-2025-14847

creationtimestamp| type| source ---|---|--- 2025-12-19 12:00:19+00:00| seen| https://gist.github.com/Darkcrai86/4146f75f6c0ffb7732c642774dd0638a 2025-12-19 12:26:53+00:00| seen| https://gist.github.com/Darkcrai86/79c4d85e9947c9cbadcb5682e0de0e26 2025-12-19 15:40:19+00:00| seen|...

CVE-2025-14151

creationtimestamp| type| source ---|---|--- 2025-12-19 09:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3madfaznfoe2m 2025-12-19 09:36:06+00:00| seen| https://gist.github.com/Darkcrai86/7ab050f1e748cd1d0a529a46c0de364d 2025-12-19 10:36:11+00:00| seen|...

CVE-2025-34451

A flaw was found in proxychains-ng. An attacker can exploit a stack-based buffer overflow vulnerability in the proxyfromstring function by providing crafted proxy configuration entries containing overly long username or password fields. This can lead to memory corruption or application crashes,...

CVE-2025-14733

creationtimestamp| type| source ---|---|--- 2025-12-19 01:35:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/115743663755552892 2025-12-19 01:35:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mackgko76e2g 2025-12-19 08:02:37+00:00| exploited|...

CVE-2025-64235

creationtimestamp| type| source ---|---|--- 2025-12-18 19:31:11+00:00| seen| https://gist.github.com/Darkcrai86/99d8c41d609f92edf355938664d3c06e 2025-12-18 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabwbxdylp2o...