GHSA-XV57-4MR9-WG8V Next.js Content Injection Vulnerability for Image Optimization

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious...

PT-2025-35326

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 14.2.31 Next.js versions 15.0.0 through 15.4.5 Description Next.js Image Optimization is susceptible to content injection. Attackers controlling external image sources can trigger file downloads with arbitrary content...

RHSA-2024:3467

creationtimestamp| type| source ---|---|--- 2025-08-27 13:18:18+00:00| seen| Telegram/UAejBj98RzShpsNkXUUt6fObsqMDpRdGyfFwVPtg8w8Sx0w 2025-08-27 13:18:19+00:00| seen| Telegram/RZsgBjEKFpqvyCP045mGfeIhNqahv01cUbn8KU7bsiulOCE 2025-08-30 15:22:53+00:00| seen|...

RHSA-2023:7700

creationtimestamp| type| source ---|---|--- 2025-08-27 12:17:56+00:00| seen| Telegram/l0CSYy6kMdLDJ0OBY7w38SDlt5uY1gAfLLEjxRA0vwYL4 2025-10-10 00:08:56+00:00| seen| Telegram/7haXfDPs-a5ycsXOHXTQSz80Y7lryvikaVGG0VkGdUPhXI...

CVE-2025-2313

creationtimestamp| type| source ---|---|--- 2025-08-27 11:17:18+00:00| seen| Telegram/JzqS30rbsZkXX-J9q-FpBkOr8wylmkM98sbVjWjXhrVNsA 2025-08-27 11:17:20+00:00| seen| Telegram/ssOidBomCKbG8sjcbyELy9TqieNAw9NmIvZVU6qSPqCeW2g 2025-08-27 11:17:24+00:00| seen|...

CVE-2025-30038 Session ID leakage in Zone.Identifier of downloaded files

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream ADS for all files downloaded from potentially untrusted sources...

CVE-2025-30038 Session ID leakage in Zone.Identifier of downloaded files

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream ADS for all files downloaded from potentially untrusted sources...

Linux Distros Unpatched Vulnerability : CVE-2023-39515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2023-39514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2020-13817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transm...

Linux Distros Unpatched Vulnerability : CVE-2023-39512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2023-39366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2020-7106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti 1.2.8 has stored XSS in datasources.php, colortemplatesitem.php, graphs.php, graphitems.php, lib/apiautomation.php, useradmin.php, and usergroupadmin.php,...

CVE-2025-7775

creationtimestamp| type| source ---|---|--- 2025-08-26 11:58:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0268 2025-08-26 12:04:41+00:00| seen| https://www.cert.at/de/warnungen/2025/8/citrix-netscaler-adc-schwachstellen-cve-2025-7775 2025-08-26 12:28:36+00:00| seen|...

CVE-2025-53118

creationtimestamp| type| source ---|---|--- 2025-08-26 00:30:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbb5xqqt52p 2025-08-26 01:31:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxbelocjnp22 2025-08-28 10:29:39+00:00| confirmed|...

CVE-2025-8627

creationtimestamp| type| source ---|---|--- 2025-08-25 22:00:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115091649506922253 2025-08-26 01:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbfbt7ek52p...

CVE-2025-52930

creationtimestamp| type| source ---|---|--- 2025-08-25 20:00:07+00:00| seen| https://infosec.place/objects/01c7c6e8-b7a4-4c90-9e35-e56456850cab 2025-08-26 00:24:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbasmm44i27...

CVE-2025-53085

creationtimestamp| type| source ---|---|--- 2025-08-25 18:30:14+00:00| seen| https://infosec.place/objects/de54d7bd-1d09-48f4-8166-de141cb2e764 2025-08-26 00:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbcq6a24a22...

CVE-2025-52456

creationtimestamp| type| source ---|---|--- 2025-08-25 15:13:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lxabzpj77e2t 2025-08-26 06:00:06+00:00| seen| https://infosec.place/objects/10286d20-ea98-489d-8e55-820dca10e508...

CVE-2025-54480

creationtimestamp| type| source ---|---|--- 2025-08-25 14:15:14+00:00| seen| https://bsky.app/profile/potato.software/post/3lxa6rlulrr2z 2025-08-25 17:22:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajakblc42z 2025-08-26 06:00:33+00:00| seen|...