Content Injection

Next.js is vulnerable to content injection. The vulnerability is due to attacker-controlled external image sources being able to trigger file downloads with arbitrary content and filenames under specific configurations, which allows an attacker to perform phishing or deliver malicious files...

CVE-2025-57483

creationtimestamp| type| source ---|---|--- 2025-09-26 14:34:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/53178 2025-09-26 21:00:06+00:00| published-proof-of-concept| Telegram/pPehM9XP9UqPJSkSBo6XE6EECTJ7mFLOl2isDLbdd3m6RM0...

CVE-2025-43993

creationtimestamp| type| source ---|---|--- 2025-09-25 19:51:44+00:00| seen| Telegram/b-QaMo27D801K5oUXBbHxi6vk99OhglIGgoZF-CrvDshJFA 2026-01-16 18:08:53+00:00| seen| Telegram/I3-zFtaxViYXm9hfGR-UWotuHKxXoIhOFZR3YKeNWqfhCxo...

CVE-2025-20333

creationtimestamp| type| source ---|---|--- 2025-09-25 16:03:48+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/115265778831418980 2025-09-25 16:17:00+00:00| seen| https://thehackernews.com/2025/09/urgent-cisco-asa-zero-day-duo-under.html 2025-09-25 16:17:20+00:00| seen|...

CVE-2025-20363

creationtimestamp| type| source ---|---|--- 2025-09-25 16:03:48+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/115265778831418980 2025-09-25 16:17:20+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0298 2025-09-25 16:35:09+00:00| seen|...

CVE-2025-20240

creationtimestamp| type| source ---|---|--- 2025-09-25 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1645 2025-09-25 11:38:17+00:00| exploited| https://t.me/truesecator/7459 2025-09-26 08:27:34+00:00| seen|...

Uncontrolled Search Path Element

Overview @salesforce/cli is a The Salesforce CLI Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the Replace Trusted Executable feature. An attacker can execute arbitrary code by placing a malicious executable in a directory that is searched before the...

GHSA-X5QJ-9VMX-7G6G

creationtimestamp| type| source ---|---|--- 2025-09-23 02:51:25+00:00| seen| https://gist.github.com/konard/308afa54a32c9f1918f70f1cb1bdd50b 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen|...

GHSA-2XJX-V99W-GQF3

creationtimestamp| type| source ---|---|--- 2025-09-23 02:51:25+00:00| seen| https://gist.github.com/konard/308afa54a32c9f1918f70f1cb1bdd50b 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen|...

GHSA-6PX8-22W5-W334

creationtimestamp| type| source ---|---|--- 2025-09-23 02:51:25+00:00| seen| https://gist.github.com/konard/308afa54a32c9f1918f70f1cb1bdd50b 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen|...

CVE-2025-57433

creationtimestamp| type| source ---|---|--- 2025-09-22 18:48:28+00:00| seen| https://gist.github.com/Darkcrai86/5edd9ad72fbb10eb6171546a091f4274 2025-09-22 19:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzh5ltrist2c...

CERTFR-2025-ACT-040

creationtimestamp| type| source ---|---|--- 2025-09-22 13:50:46+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115248270209420806 2025-09-22 13:50:46+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lzgkhmqreb25 2025-09-22 14:34:31+00:00| seen|...

CVE-2025-55154

creationtimestamp| type| source ---|---|--- 2025-09-19 12:14:16+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lz6toct2pz2h 2025-09-19 12:17:11+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3lz6tofyvmle2 2025-09-19 21:32:51+00:00| seen|...

CVE-2025-8531

creationtimestamp| type| source ---|---|--- 2025-09-19 10:52:07+00:00| seen| https://bsky.app/profile/potato.software/post/3lz6p3gsiww2y 2025-09-19 11:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz6qjbfyrf2m 2025-09-23 10:00:00+00:00| seen|...

CVE-2025-40677

creationtimestamp| type| source ---|---|--- 2025-09-18 13:27:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz4hcikiby2c 2025-09-22 08:06:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/52616 2025-09-22 11:00:07+00:00| published-proof-of-concept|...

CVE-2025-10585

creationtimestamp| type| source ---|---|--- 2025-09-17 23:21:47+00:00| seen| https://bsky.app/profile/secureblue.dev/post/3lz2y23vazc2f 2025-09-18 03:00:11+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz3eamyenc2c 2025-09-18 03:49:00+00:00| seen|...

CVE-2025-23328

creationtimestamp| type| source ---|---|--- 2025-09-17 23:12:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz2xk4xfw22t 2025-09-18 05:17:12+00:00| seen| https://gist.github.com/Darkcrai86/f1c37329548da9826f57bfd073433365...

CVE-2025-43359

creationtimestamp| type| source ---|---|--- 2025-09-17 23:12:47+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xjylsvs2d 2025-09-17 23:14:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xnuhons2d 2025-10-13 16:14:58+00:00| seen|...

CVE-2025-10621

creationtimestamp| type| source ---|---|--- 2025-09-17 23:04:07+00:00| seen| https://bsky.app/profile/potato.software/post/3lz2x2imyek25 2025-09-18 05:18:00+00:00| seen| https://gist.github.com/Darkcrai86/fe0c957df60ebda6388bc8e9b11ecf2a...

CVE-2025-10596

creationtimestamp| type| source ---|---|--- 2025-09-17 15:25:38+00:00| seen| https://gist.github.com/Darkcrai86/87c14965b3463ee1c5e62eb1a689c174 2025-09-17 16:55:30+00:00| seen| https://gist.github.com/Darkcrai86/2a6cc27fb3231acfaf13c21b6136c6d2...