CVE-2025-14995

creationtimestamp| type| source ---|---|--- 2025-12-20 13:26:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115752119093198094 2025-12-21 09:12:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maieuis2xj22 2025-12-21 10:03:10+00:00| seen|...

CVE-2025-14993

creationtimestamp| type| source ---|---|--- 2025-12-20 08:15:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750896189944926 2025-12-21 04:21:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115755638012851704 2025-12-21 05:36:02+00:00| seen|...

CVE-2025-14961

creationtimestamp| type| source ---|---|--- 2025-12-20 07:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750707517759993...

CVE-2025-14959

creationtimestamp| type| source ---|---|--- 2025-12-20 05:33:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750259198918758...

CVE-2025-14955

creationtimestamp| type| source ---|---|--- 2025-12-20 04:36:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750034748201822...

CVE-2025-14952

creationtimestamp| type| source ---|---|--- 2025-12-20 04:36:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750034696710607...

CVE-2025-13329

creationtimestamp| type| source ---|---|--- 2025-12-20 04:04:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/115749910664280235 2025-12-20 06:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mafmtpkrxo2q 2025-12-20 10:31:27+00:00| seen|...

SUSE CVE-2025-14876

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

PT-2025-52551

Name of the Vulnerable Software and Affected Versions WP JobHunt plugin for WordPress versions prior to 7.8 Description The WP JobHunt plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the cs update application status callback function allows...

GHSA-V98V-FF95-F3CP

creationtimestamp| type| source ---|---|--- 2025-12-19 23:44:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115748886231994842 2025-12-22 17:17:07+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av25-857 2025-12-23 22:47:55+00:00| seen|...

EUVD-2025-204539

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-14940

creationtimestamp| type| source ---|---|--- 2025-12-19 14:21:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115746673133123865...

CVE-2025-56157

creationtimestamp| type| source ---|---|--- 2025-12-19 07:42:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115745104181415797 2025-12-19 16:41:46+00:00| seen| https://gist.github.com/gmh5225/56a03049c269e715bfc21a6b9fced8f0 2026-01-21 17:31:02+00:00| seen|...

CVE-2025-13999

creationtimestamp| type| source ---|---|--- 2025-12-19 07:40:37+00:00| seen| https://gist.github.com/Darkcrai86/4d561d59c1bfb133a6d9263b268e6c62 2025-12-19 08:06:37+00:00| seen| https://gist.github.com/Darkcrai86/f0fab3e04744271bf0b64d65a6f0809a...

SUSE CVE-2025-14422

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

turms 安全漏洞

turms is an instant messaging engine from turms-im open source. A security vulnerability exists in turms v0.10.0-SNAPSHOT and prior versions, which stems from improper access control in the user online status query function and could lead to information disclosure...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...