CVE-2025-53793

creationtimestamp| type| source ---|---|--- 2025-08-12 16:01:32+00:00| seen| https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review 2025-08-12 18:31:45+00:00| seen| https://bsky.app/profile/newsnexttech.bsky.social/post/3lw7x2d434y22 2025-08-12 18:32:09+00:00| seen|...

CVE-2025-49457

creationtimestamp| type| source ---|---|--- 2025-08-12 15:28:49+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt7fbrk2a 2025-08-13 01:31:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwaoj4tieg24 2025-08-13 06:04:18+00:00| seen|...

CVE-2025-42943

creationtimestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115013490316314202 2025-08-12 03:49:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6fq4izvi2c...

MAL-2025-6821 Malicious code in @tradair-repo/sources-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c2e8efcfd67964d523b508359644439a1c57011cf171ba350241c6949654fe4 The OpenSSF Package Analysis project identified '@tradair-repo/sources-react' @ 1.0.0-malicious npm as malicious. It is considered malicious...

CVE-2025-8355

creationtimestamp| type| source ---|---|--- 2025-08-11 11:21:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4okhoabkr2 2025-08-11 11:40:37+00:00| seen|...

Malicious code in angular-sources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff334dd83f794d2141307860dd5229672ff176ff05a1a2ac22674fe9146f8938 The OpenSSF Package Analysis project identified 'angular-sources' @ 999.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6819 Malicious code in angular-sources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff334dd83f794d2141307860dd5229672ff176ff05a1a2ac22674fe9146f8938 The OpenSSF Package Analysis project identified 'angular-sources' @ 999.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-8824

creationtimestamp| type| source ---|---|--- 2025-08-11 04:01:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw3vxojm7b2q 2025-08-11 04:31:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lw3xnj6uja2m 2025-08-11 15:39:40+00:00| seen|...

CVE-2025-25278

creationtimestamp| type| source ---|---|--- 2025-08-11 03:37:10+00:00| seen| https://bsky.app/profile/potato.software/post/3lw3ulrhhhk25 2025-08-11 05:51:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw444mdqmp2e...

CVE-2025-8820

creationtimestamp| type| source ---|---|--- 2025-08-11 00:01:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lw3ik5mep52m 2025-08-11 02:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw3qnlxpdr2k 2025-08-11 15:39:39+00:00| seen|...

CVE-2025-53520

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...

CVE-2025-8801

creationtimestamp| type| source ---|---|--- 2025-08-10 09:00:32+00:00| seen| https://bsky.app/profile/potato.software/post/3lvzw737lhn2s 2025-08-10 11:56:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw27zpo6372p...

TraceLens: Question-Driven Debugging for Taint Flow Understanding

Taint analysis is a security analysis technique used to track the flow of potentially dangerous data through an application and its dependent libraries. Investigating why certain unexpected flows appear and why expected flows are missing is an important sensemaking process during end-user taint...

CVE-2025-8759

creationtimestamp| type| source ---|---|--- 2025-08-09 18:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvydx456ns2l 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

CVE-2025-55149

creationtimestamp| type| source ---|---|--- 2025-08-08 21:43:28+00:00| published-proof-of-concept| https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h 2025-08-09 02:53:58+00:00| seen|...

CVE-2025-8731

creationtimestamp| type| source ---|---|--- 2025-08-08 20:33:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvw3xxzzko2p 2025-08-09 07:31:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvxar6oqpa2s 2025-08-11 15:39:40+00:00| seen|...

CVE-2025-8730

creationtimestamp| type| source ---|---|--- 2025-08-08 16:15:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvvnl3jvcw2p 2025-08-09 09:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvxfrqeupp2g 2025-08-10 04:53:41+00:00| published-proof-of-concept|...

CVE-2025-53792

creationtimestamp| type| source ---|---|--- 2025-08-08 03:46:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvudpmt6lk2h 2025-08-08 04:31:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvugacqxf22b 2025-08-11 15:07:35+00:00| seen|...

Medium: jackson-core

Issue Overview: jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth...

CVE-2025-34152

creationtimestamp| type| source ---|---|--- 2025-08-07 20:07:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46935 2025-08-08 03:00:05+00:00| published-proof-of-concept| Telegram/e2h4KF19bvVdrVdcOJim51yVXX08ZKfBey7WjVNbHEXwmTU 2025-08-09 21:02:26+00:00| seen|...