PT-2025-52448

Name of the Vulnerable Software and Affected Versions Turms IM Server versions prior to 0.10.0-SNAPSHOT Description The software contains a flaw in access control related to querying user online status. An authenticated user can access online status, device information, and login timestamps of an...

FastAPI SSO 安全漏洞

FastAPI SSO is a FastAPI plugin from the individual developer Tomas Votava. A security vulnerability exists in FastAPI SSO versions prior to 0.19.0, which stems from improper validation of the OAuth status parameter and could lead to a cross-site request forgery attack...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-64676

creationtimestamp| type| source ---|---|--- 2025-12-18 22:12:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115742865152336856 2026-01-06 17:06:07+00:00| seen| Telegram/NtgdGeZWqROuFZ2INFVIF7wbiZX6L2oMH79jCDcZlZLsnY...

CVE-2025-34441

AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...

CVE-2025-63820

creationtimestamp| type| source ---|---|--- 2025-12-18 18:49:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115742065581136698...

CVE-2025-14738

creationtimestamp| type| source ---|---|--- 2025-12-18 18:20:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741950789308220 2025-12-18 20:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maby3gkidi22...

CVE-2025-14884

creationtimestamp| type| source ---|---|--- 2025-12-18 17:11:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741680425989274 2025-12-18 20:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabzswlucz2q 2026-01-07 21:06:47+00:00| seen|...

CVE-2025-63390

creationtimestamp| type| source ---|---|--- 2025-12-18 15:58:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741395287796408 2026-01-21 17:31:11+00:00| seen| https://gist.github.com/Cristliu/0897bceac5fdc2d945304b5087a84f14 2026-01-21 17:31:29+00:00| seen|...

CVE-2025-63391

creationtimestamp| type| source ---|---|--- 2025-12-18 15:31:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741286092781846 2026-01-21 17:31:13+00:00| seen| https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c 2026-01-21 17:31:31+00:00| seen|...

CVE-2025-63389

creationtimestamp| type| source ---|---|--- 2025-12-18 15:29:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741280992694557 2026-01-21 17:31:09+00:00| seen| https://gist.github.com/Cristliu/b6f4d070fb27932f581be1aadc0923e7 2026-01-21 17:31:27+00:00| seen|...

GHSA-5CGR-J3JF-JW3V

creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...

CVE-2025-64260

creationtimestamp| type| source ---|---|--- 2025-12-18 11:22:03+00:00| seen| https://gist.github.com/Darkcrai86/d480683c190767a2674ad9eb4625e5d7...

CVE-2025-60063

creationtimestamp| type| source ---|---|--- 2025-12-18 09:48:58+00:00| seen| https://gist.github.com/Darkcrai86/6710e1b91c5c3cbfa60d8db7ea906b68 2025-12-18 17:01:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabnokixh32m...

CVE-2025-60174

creationtimestamp| type| source ---|---|--- 2025-12-18 09:39:50+00:00| seen| https://gist.github.com/Darkcrai86/b120c4890bd6cd88029eeab830ccdebc...

CVE-2025-66054

creationtimestamp| type| source ---|---|--- 2025-12-18 09:23:20+00:00| seen| https://gist.github.com/Darkcrai86/8ad56b60e966058ee424cf6ab537e395 2025-12-18 09:30:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maauht7deq2q...

CVE-2025-67791

creationtimestamp| type| source ---|---|--- 2025-12-18 07:57:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115739500542473315...

Mozilla Thunderbird < 3.0.7

The version of Thunderbird installed on the remote Windows host is prior to 3.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before...

CVE-2025-14764

creationtimestamp| type| source ---|---|--- 2025-12-17 20:38:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115736831846545668...

CVE-2025-34441

AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...